Enterprise Rent-A-Car tries .Net Terminal Services. PAGE 30 


Five tips for heading off abuse by consultants. PAGE 44 
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Energy Market 
Revamp Pushes 
$79M IT Effort 


Wholesale electricity 
firm tries to get jump 
on standardizing data 


BY THOMAS HOFFMAN 
HOLYOKE, MASS 

Federal efforts to create a 
standardized, nationwide 
wholesale electricity market 
have prompted ISO New Eng- 
land Inc. to jump ahead of the 
regulatory curve and invest 
$79 million in a system re- 
design that’s scheduled to go 
live March 1. 


ISO New England, a not-for- | 


profit corporation that over- 
Energy Market, page 16 


‘Trustworthy’ Plan Plods Uphill 


Microsoft continues 
struggle to balance 
security, functionality 


BY CAROL SLIWA 
Wednesday will mark the one- 
year anniversary of the day 
that Bill Gates decreed, via a 
companywide memo, that 
“Trustworthy Computing” 
would be the highest priority 
for all the work Microsoft 
Corp. employees do. 
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TECHNOLOGY DETAILS 


ISO New England’s 
System Architecture 


The new energy market system 
includes hardware and software 
for design, testing and produc- 
tion purposes. 


@ The production system is 
powered by 400-plus servers, 
with 8 HP AlphaServer GS160 
models running Tru64 Unix. 


@ The system includes Oracle 
databases and will run a set of 
mostly Java-based back-end 
applications. 


@ Object broker technology 
will be used to route transac- 
tions to different servers for fail- 
over purposes. 


® Linux servers, most based 
on Red Hat's software, will run 
settlement and security applica- 
tions and an external Web site. 


| ing up for the Jan. 21 launch of 
| a long-awaited line of Alpha- 
| Servers that promises to deliv- 


| ously announced 


Sets the Stage for 


ha’s Last H 


Company will introduce new line of high-end 
servers along with plan to migrate to Itanium 





BY JAIKUMAR VIJAYAN 
Hewlett-Packard Co. is gear- 


er substantial price/perfor- 


| mance gains over 
existing technology. 


But HP’s previ- 


plans to eventually 
standardize all of its servers 


| on Intel Itanium processors 


Plenty of hurdles still lie 
ahead for Microsoft as it tries 


| to strike the proper balance 


between ensuring the security 
of its software and pushing out | 


| the sort of innovative, increas- 
| ingly scalable and more com- 


plex products it needs to keep 
its business thriving. 

“There is always a trade-off 
between new functionality 
and security exposures, and a 


| perfect example of that is 


BSD,” said Andre Mendes, 
chief technology integration 
officer at the Public Broad- 
casting Service, referring to 
Trustworthy, page 51 | 
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may temper some of the en- 
thusiasm the announcement 


| would otherwise have gener- 


ated, analysts said. 


pany’s AlphaServer business is 
| deep in the red and is expect- 

| ed to lose about $200 million 

| this fiscal year alone. 

| HP's Marvel family of Al- 

| phaServers is based on the 


HP gained the Alpha tech- 


nology through its purchase of 
| Compaq Computer Corp. last 

| year. AlphaServers run the 

| OpenVMS and Tru64 Unix 

| Operating systems and were 


scheduled to be 
phased out of pro- 
duction even before 
HP’s merger with 
Compaq. The com- 


urrah 


company’s recently released 
V7 processors, with models 
ranging from a two-CPU de- 
partmental server to a 64- 
processor enterprise server. 
HP last week confirmed the 
planned Marvel announce- 
ment but declined to provide 
details on the systems or mi- 
gration strategy in advance. 
However, much of that infor- 


mation has been freely avail- 


able to the Alpha faithful, 
most recently from HP, and 
from Compaq before that. 
Apart from the faster EV7 
processors, the new Marvel 
departmental and enterprise 
servers will feature a technol- 
ogy called switchless mesh ar- 
AlphaServer, page 16 





8 Software bugs cost 


ee 
4 


U.S. companies nearly 


$60 billion per year, 
according to the National 
Institute of Standards and 
‘Technology. But they don't 
have to. Find and fix 1° of your 
software bugs, and 90°o of your 
system problems go away, 
experts claim. Learn how 
smart CIOs are creating com- 
prehensive strategies to test 

for and fix bugs in both offthe- 
shelf software and applications 
created in-house. PAGE 39 
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ected software 
means a more perso 


The myriad of choices available to online consumers today is staggering. The personal service available at traditional 
businesses is largely absent online, and the company that can bring that feeling of farniliarity back will reap huge rewards. 
Microsoft solutions for Internet business provide the tools you need to build stronger relationships with your global 
network of customers and trading partners. Scalable user and content profiling allows you to target content and engage 
customers and partners with more personalized options, including customer-specific catalogs with custom pricing and 
product information in multiple currencies and languages. 

You can aggregate profile data from multiple underlying data sources to leverage existing technology investments 
and enable richer profiling capabilities. With built-in business analytics, predict purchasing and browsing preferences 
by analyzing user behavior, all while delivering real-time recommendations. Plus, through direct support for XML-based 
data, companies can exchange catalog and order information with partners and integrate order fulfillment systems 
for seamless transactions. Find out how .NET connected software can help you connect with your customers better. 


Go to microsoft.com/enterprise 
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sonalized connection between your company 


The Royal Canadian Mint wanted to reach its diverse worldwide customers, expand sales of its 
products, and deliver a highly customized consumer experience, so they used the Web content 
management capabilities of Microsoft Content Management Server integrated with the e-commerce, 
personalization and backend data integration capabilities of Microsoft Commerce and BizTalk 
Servers. Now the Mint can publish content in multiple languages, draw on customer information 
from its legacy database, and feed online orders through an 
existing ERP system, enabling the Royal Canadian Mint to offer 


sah . customers a richer and more personalized experience. 
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450 servers. 


And that's just one office. 


You're burning the midnight oil. So is your storage network. And the only things growing faster than your storage needs 
r storage problems. The solution? BrightStor™ Portal. A breakthrough in enterprise-wide storage software that provides 

a single point of management. With a flexible portal interface that’s easy to use, BrightStor Portal gives you a customized view 
of your entire storage environment so you can respond to any issue, anytime, anywhere. In-depth access to business-critical 
In 24 x 7 will help you simplify operations, increase productivity and maximize cost efficiency across your enterprise. 


Hey, with more and more issues under control, you may actually get to go home ca.conybrightstor/portal 


BrightStor’ Storage Solutions a Computer Associates 








When the Plug Gets Pulled 


In the Management section: A 


scrapped IT project doesn’t have to be 
a debilitating career setback for an IT 
project manager. Here’s advice from 
those who have been there. Page 42 
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4 High-density blade PCs that 
can be installed in computer 
room racks gain attention. 


IBM plans technology to link 
the company’s DB2 database 
to multiple sources. 


Some i2 Technologies users 
say they’re not getting the 
ROI they expected. 


A market is emerging for 
VPN technology that’s built 
around the SSL protocol and 
supports remote access. 


BMC Software completes a 
piece-by-piece upgrade of its 
Patrol software. 


The Bush adminstration’s 
economic stimulus package 
doesn’t satisfy high-tech in- 
dustry groups. 


State Cl0s are working on 
ways to keep IT moving ahead 
under the weight of historic 
state revenue shortfalls. 


Singlestep Technologies’ 
“manager of managers” soft- 
ware can pull together data 
from different network man- 
agement systems. 


A federal plan to require fi- 
nancial services firms to geo- 
graphically separate their data 
centers won’t be pursued. 


IBM plans to rent supercom- 
puting resources under an on- 
demand model. 


2 SGI is offering Itanium 2- 
based servers running Linux 
to complement its Irix OS. 


28 Case Study: Dallas Answers 
the Call. The city implements 
an integrated call-taking sys- 
tem for all city services. 


30 .Net Terminal Services Drive 
Rental System. Enterprise 
Rent-A-Car’s huge Microsoft 
Terminal Services deploy- 
ment tests the product’s 
capabilities. 


32 Future Watch: Pervasive 
Computing Gets Organized. 
A new data-flow standard 
could pave the way for per- 
vasive computing. 


36 Security Manager’s Journal: 
Spam Issue Viewed as IT 
Security Failure. Spam puts 
Vince Tuesday on the spot 
with users. 


MANAGEMENT 





39 Biting Back. Find and fix just 
1% of software bugs early in 
the development process, and 
costs could drop by as much 
as 90%, experts say. 


43 High Anxiety. Author Jeffrey 
A. Miller explains how to 
recognize unhealthy levels 
of anxiety in your IT depart- 
ment and what you can do to 
alleviate it. 


44 Q&A: Coming in From the 
Cold. IT manager and author 
Steve Romaine offers tips on 
recognizing potential abuses 
by consultants and how to 
better manage IT “experts” 
hired from the outside. 


6 On The Mark: Mark Hall looks 
at MySQL’s chances of taking 
on the Big Four in databases, 
finds a brewing spat among 
storage management vendors 
and more. 


20 Patricia Keefe worries that 
despite many big projects in 
the year ahead, the January 
doldrums might lull IT into 
complacency. 


20 Pimm Fox answers the devel- 
opers who criticized his re- 
cently expressed views on the 
limits of Linux. 


David Moschella questions 
the validity of the term utility 
computing and suggests an- 
other way of looking at the 
technology. 


37 Nicholas Petreley has digital 
rights on his mind as he pre- 
sents his not-so-sought-after 
“You Can’t Be Serious” 
awards for 2002. 


45 John Berry says not all IT 
investments require financial 
modeling upfront. Sometimes 
managerial experience is the 
best ROI calculator. 


52 Frankly Speaking: Frank 
Hayes looks at the many ways 
business executives hide the 
truth from IT. 
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CRM Opens UP 


In the Technology section: CRM 
software vendors are offering an 
increasing array of integration tools 
for connecting to other enterprise 
applications and data. Page 23 
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Fix Your Weakest Link 


One of your company’s greatest security 
risks may be sitting next to you. Try these 
seven suggestions to educate employees on 
protecting your organization against attack. 


© QuickLink 35499 


Linux Persuasion 

How can you talk your CIO into trying Lin- 
ux? Open Source Development Labs director 
Timothy D. “Wookie” Witham offers some 
tips. @ QuickLink 35485 


Migrating Java Apps to .Net 

KNOWLEDGE CENTER: Here’s what you need 
to know about converting Java or Visual J++ 
applications to J# or C#. @ QuickLink 35547 


Realistic Disaster Recovery 


Paul Castellano of Allegheny Energy Inc. 
offers advice on gaining senior manage- 
ment buy-in on your next disaster recovery 


project. @ QuickLink 35254 


More Mac 


With Apple seeking a bigger presence in the 
enterprise, Computerworld is beefing up its 
Macintosh section and has launched a new 
biweekly newsletter to keep you up to date 
on Apple activities. 


@ QuickLink 22820 
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AT DEADLINE 


Judge Won’t End 
Microsoft Suits 


A federa! court judge in Baltimore 
denied motions by Microsoft 
Corp. seeking to dismiss private 
antitrust lawsuits filed by Moun- 
tain View, Calif.-based Be Inc. 
and Santa Rosa, Calif.-based 
Burst.com Inc. Late Friday, Judge 
Frederick Motz was due to hear 
arguments on Microsoft's request 
to dismiss 13 of 16 claims made 
by Sun Microsystems Inc. in an- 
other antitrust suit. 


Amdocs Finalizes 
IT Deal With SBC 


Amdocs Ltd., a Chesterfield, Mo.- 
based software vendor, said it hac 
finalized a seven-year IT out- 
sourcing deal valued at “hundreds 
of millions of dollars” with SBC 
Communications Inc. in San Anto- 
nio. Amdocs will upgrade the sys- 
tems used by SBC’s telephone di- 
rectory unit and then manage 
them. An unspecified number of 
IT workers will be shifted from 
SBC to Amdocs. 


Oracle Makes Cuts 
In Sales Force 


Oracle Corp. said it has nearly fin- 
ished a planned reorganization of 
its North American sales force 
that includes layoffs of about 200 
workers in the U.S. and Canada. 
The software vendor last month 
said the cuts were on the way in 
connection with a move to split its 
sales force into separate uniis for 
its database and applications. 


Short Takes 


MICROSOFT said a faulty router 
upgrade by AT&T CORP. last 
Thursday temporarily cut off ac- 
cess to several of the software 
vendor's Web sites and messag- 
ing services for about 40% of In- 
ternet users. . . . ART TECHNOLO- 
GY GROUP INC., a vendor of ciitine 
marketing and sales software in 
Cambridge, Mass., said it laid off 
about 115 employees in a move 
that cut its workforce by 20%. 





| PC heavyweights 


d 


keep an eye on 


| new technology 


BY LUCAS MEARIAN 
EVERAL COMPANIES 
that have been kicking 
the tires on so-called 
blade PCs are starting 


| to deploy the rack-mounted 


desktop technology in their 
data centers, looking for bene- 
fits such as increased 
security and ease of 
management. 

For now, blade PCs 
are available only from 
start-up vendors like 
ClearCube Technology Inc. in 
Austin, Texas. But the devices, 
which put a desktop spin on 
the more prevalent blade serv- 
er concept, are also starting to 
attract the attention of some 
leading PC vendors. 

For example, a spokeswo- 
man for Hewlett-Packard Co. 


| last week said the company 


isn’t ready to disclose any 
plans to offer blade PC tech- 
nology. But HP may be willing 
to address the topic in a month 
or two, she added. 

Don McCall, a product mar- 
keting manager at Dell Com- 
puter Corp., said the company 
is monitoring ClearCube’s 
progress closely. For now, Dell 
doesn’t see enough demand to 
offer blade client technology, 
McCall said. “We do want to 
watch it, however,” he added. 

ClearCube, which intro- 
duced its first products in 
2000, shrinks PCs to blade- 
size devices that are installed 
in racks in data centers. End 
users connect to the blades 
through videotape-size con- 
trol units that sit on desktops 
and include connections for 
monitors, keyboards and other 
peripheral devices. 

BP Energy Co., a Houston- 
based gas, oil and energy trad- 
ing firm, in November fin- 
ished a rollout of 100 Clear- 
Cube blade clients at a new 


Ua 
SYSTEMS 





energy trading floor in Cal- 
gary, Alberta. 

It cost BP Energy about 
$250,000 for the blade clients, 
including installation and soft- 
ware. But the project brought 
an immediate return on in- 
vestment by doing away with 
the cost of maintaining indi- 
vidual desktop PCs and elimi- 
nating the need to buy trading- 
floor desks built to hold multi- 
ple systems, said Greg Miller, 
manager of infrastruc- 
ture at the company. 

“From an opera- 
tional point of view, 
we've shrunk the en- 
velope of potential problems,” 
Miller said. PC maintenance 
work can now be done “in a 


| bulk format where we can 


deliver it economically,” he 


| added, noting that technicians 


simply pull problematic blade 
devices out of the racks for 
service. 

The Calgary trading floor is 


Deployments Raise 
Profile of Blade PCs 


Blade Clients 
Devices like ClearCube’s can: 
LET IT managers consol- 
idate hardware in data 
centers, reducing office 
space requirements and simplify- 
ing PC maintenance. 


IMPROVE security by limiting the 


potential for users to download 
virus-laden software. 


But the blades can also: 
FACE resistance from end 
wy) users who don’t want to 
give up their desktop PCs. 


COST MORE upfront than desk- 
top PCs because of the need to 
buy racks and prepare data cen- 
ters for the devices. 


a prototype site for the rest of 


| the company, Miller noted. 


Avivah Litan, an analyst 
at Gartner Inc. in Stamford, 
Conn., said that although blade 
client technology is cutting- 
edge, the push to consolidate 
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desktop PCs into data centers 
is several years old. Putting 
PCs in a data center can help 
companies improve IT securi- 
ty by reducing unauthorized 
software downloads by end 
users, Litan said. 

But Litan and other analysts 
said blade PCs could face re- 
sistance from end users who 
don’t want to lose control over 
their desktop systems. 

That wasn’t a problem for 
Guy Fuller, IT manager at 
Chicago-based Northwestern 
Memorial Physicians Group, 
which deployed 200 Clear- 
Cube devices at a clinic two 
months ago. Fuller said the 
doctors embraced the blade 
client architecture because 
they felt PCs made too much 
noise in examination rooms. 

The upfront cost of Clear- 
Cube’s technology was about 
30% higher than the price of 
traditional desktop PCs be- 
cause Northwestern had to 
buy racks and vent its com- 
puter room to reduce the 
heat generated by the blade 
devices, Fuller said. But he 
added that he likes the tech- 
nology so much that he plans 
to deploy it at Northwestern’s 
ll other clinics by year’s end. D 





IBM Plans Software to Link 
Data From Multiple Sources 


BY MARC L. SONGINI 
IBM late this year plans to de- 
liver DB2-based integration 
software that will let IT man- 
agers link data throughout 
their systems without needing 
to collapse the information 
into a single data warehouse. 

While sketchy on the details, 
IBM last week said the integra- 
tion technology will also give 
end users real-time access to 
data beyond DB2 and rival 
databases. Using native XML 
capabilities in DB2, users will 
be able to open up data from 
conventional sources, such as 
applications, as well as infor- 
mation stored in documents or 
e-mail messages, said Nelson 
Mattos, director of informa- 
tion integration at IBM. 

He added that the new soft- 
ware will further IBM’s feder- 


| ated approach to integration, 
which is designed to provide 
access to data without requir- 
ing users to move information 
from its source and reformat 
it to be DB2-friendly. 

The company has already 
used the federated 
approach in prod- 
ucts such as Dis- 
coveryLink, which 
lets users in the life 
sciences industry 
access multiple 
databases, applica- 
tions and search engines with 
a single query. 

IBM is the only large vendor 
that’s pushing ahead exten- 
sively with this kind of virtual- 
database concept, said Philip 
Russom, an analyst at Giga In- 
formation Group Inc. One of 
| the enablers for its approach is 








the fact that DB2 has the abili- 
ty to index data stored in oth- 
er repositories, he noted. 

IBM has yet to disclose the 
middleware platforms that 
will be supported by the new 
data integration software. But 
it likely will use its own Web- 
Sphere tools, Russom said. 

The concept of federated 
databases has been around 
since the 1990s, but companies 


——— a ate On ow Start 


DATA-DRIVEN 


Visit our Data Management 
Knowledge Center for more 
Stories and resources: 
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ing to view it as de- 
sirable, he said. For 
one thing, Russom 
explained, extract- 
ing large amounts of 
heterogeneous data 
and formatting it for 
use in a database requires ex- 
tensive network resources. 

In theory, IBM’s upcoming 
technology will let users avoid 
the costs generated by such 
resource usage. Mattos said 
the new software will be re- 
leased for beta testing by June 
and should ship by year’s end. D 
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Report Questions RO! of i2’s Software 


Vendor acknowledges complexity 
but says most users get returns 





BY MARC L. SONGINI 

After spending years of effort 
and millions of dollars, some 
marquee users of i2 Technolo- 
gies Inc.’s software say they’re 
not getting their money’s 
worth on their investments, 
according to a report due to be 
released this week. 

Nucleus Research Inc. said 
12 of the 22 companies it sur- 
veyed indicated that they had 
not yet achieved a positive re- 
turn on investment after using 
i2’s supply chain management 
applications for an average of 
2.2 years. All of the users were 
touted by i2 on its Web site, 
noted Nucleus, a Wellesley, 
Mass.-based research firm. 

Dallas-based i2 acknowl- 
edged that its software is com- 
plex but defended its ROI 
record with users. And four 
i2 customers who were inter- 
viewed by Computerworld 
about the findings said they’re 
getting the desired results. 


It’s ‘Rocket Science’ 
“I’m a little bit of the opinion 
that some people who fail at it 
underestimate the difficulty of 
what they are getting into,” 
said John Mallon, director of 
supply chain management at 
On Semiconductor Corp. in 
Phoenix. “Contrary to popular 
opinion, it’s rocket science.” 
On Semiconductor has used 
i2’s software for three years. 
Mallon said implementing ad- 
vanced planning applications 
such as the ones sold by i2 can 
be even more complicated 
than installing an enterprise 


Se ereeesesseeseseseseseeseseees 


Correction 
In our Premier 100 IT Leaders list 
last week [QuickLink 34584], the 
title of The New York Times Co.'s 
Linda Lenox was incorrect. Her 
title is computer support manager. 
Also, Claus Hohmann is chief 
technology officer at Volkswagen 
Autostadt GmbH. 





resource planning system. 

But he added that the chip 
maker has saved $20 million 
through improvements in pro- 


| ductivity and inventory man- 


agement that were made pos- 
sible by i2’s products. 

On the other hand, a user at 
a Fortune 500 company who 
spoke on condition of ano- 
nymity said the Nucleus re- 
port reflects his experience 
with i2’s technology. It took 
two attempts to successfully 


agement software, the user 
said. His company wrote off 
millions of dollars after the 
first try and has yet to fully re- 
coup that money, he added. 

“It was the most difficult 
rollout we’ve ever done,” said 
the user. He added that i2’s 


| an analyst at Nu- 

| cleus, which issued 

| a similar report 

| about users of 

| Siebel Systems 

| Inc.’s customer relationship 

install i2’s transportation man- | 
tember [QuickLink 33196]. 


| sales force “had more vision 
than the ability to deliver on 
| the vision.” 


The major problem facing i2 


| users, according to Nucleus, is 
| the length of time required to 
| deploy the applications. Near- 
| ly 70% of the rollouts by the 

| surveyed users 


took longer than 
planned, said Re- 
becca Wettemann, 


management software in Sep- 


Two other analysts said the 
Nucleus survey is consistent 
with what they have heard 


| anecdotally from i2 users. 


“]2’s solutions are complex, 


| as are the problems that they 
| endeavor to solve,” said Karen 





Vendors Push SSL-Based 
Remote Access Devices 


BY MATT HAMBLEN 
Remote access appliances that 
support the Secure Sockets 
Layer (SSL) protocol are gain- 
ing the attention of various 
networking vendors, with the 
latest product announcement 
expected to be made today by 
Seattle-based Aventail Corp. 
Aventail will announce the 
EX-1500, a clientless, rack- 
mountable SSL virtual private 
network (VPN) device de- 
signed to provide remote 


| end users with secure Web 


browser access to data in 
Windows files and client/ 
server applications. 

The EX-1500 isn’t alone 
in the market. In November, 
Neoteris Inc. in Mountain 
View, Calif., added three appli- 
ances to its product line that 
also provide secure remote 
access via an SSL VPN. And 
Check Point Software Tech- 
nologies Ltd. in Redwood City, 
Calif., announced software 
support for SSL VPN hard- 





ware products in July. 
Other vendors, such as 
Netilla Networks Inc. in Som- 


erset, N.J., and NetSilica Inc. in | 
| Piscataway, NJ., have also en- 


tered the market for SSL VPN 


| technology, said John Pesca- 


tore, an analyst at Gartner Inc. 
in Stamford, Conn. The SSL- 
based products are easier to 
use and less expensive than 
VPN tools that support the 
IPsec protocol, Pescatore said. 


Simplified Installation 


IPsec requires the loading of 
client software that can con- 
flict with applications and net- 
work protocols, but there’s no 
such client software required 
for SSL, according to Pesca- 
tore and VPN users. That sim- 
plifies the installation process 
and can reduce the number of 
connection problems, thereby 
lowering IT support costs, 
they said. 

Ron Sha, CIO at Borland 
Software Corp. in Scotts Val- 


MONEY MATTERS 


For more stories and infor- 
mation resources on IT 

investment issues, head to 
our ROI Knowledge Center. 
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Peterson, an analyst at Gartner | 


| 

| Inc. And until a year ago, the 

| company’s modules differed 
from one another too much to 


be configured and deployed in | 


| a standard way, she said. 
“You don’t typically take the 
| software and drop it in place 
| and have it run,” 
said Janet Eden- 
Harris, i2’s chief 
marketing officer. 
She said Nucleus’ 
findings are diffi- 
cult to refute be- 
cause there are 
many ways to cal- 


culate ROI or even the average | 


cost of an implementation. But 


i2 does provide ROI metrics to | 


methodology, and most users 
get a return, Eden-Harris said. 
She also noted that i2 has 
changed its sales methods 
from the “zealous years” when 


| 
| customers as part of its rollout 
| it was growing rapidly and that 





Project Statistics 
The survey of 22 of i2’s refer- 
ence customers reveals the 
following: 

® 12 of the users said they had 
not gotten an RO! after an 
average of 2.2 years with the 
supply chain software. 


= The average implementation 
cost was $7.2 million, with hard- 
ware accounting for more than 
$400,000 


® The software required 74 
hours of training for end users, 
on average. 


® 14 of the users saw reductions 
in inventory costs, but only four 
said the savings offset their in- 
stallation costs. 


it now focuses more on ensur- 


; ing long-term customer satis- 
| faction. 12, which has lost mon- 


ey in four straight quarters, is 
also designing its upcoming i2 
Six set of applications to be 


| easier to install and use than 


existing versions, she said. D 





ley, Calif., noted that the soft- 
ware vendor can connect new 
employees around the world 
to its corporate applications in 
“less than a minute” using Neo- 
| teris’ technology. The workers 
need only a user name and 
password, Sha said. 

Dade Behring Inc. in Deer- 
field, Ill., has been beta-testing 
the EX-1500 for a month and 
plans to roll out the Aventail 
device for 900 field sales and 
service workers in the U.S., 
said Craig Ross, director of 
global communication ser- 
vices at the maker of labora- 
tory diagnostic products. 


PRODUCT DETAILS 


Aventail’s 
EX-1500 


= Pricing starts at $20,000 for 
the device, which features a rack- 
mounted design and supports 
clientless remote access. 


§ The appliance uses SSL to 
connect Web browsers to Micro- 
soft Common Internet File Sys- 
tem files, Windows Terminal Ser- 





vices and client/server software. 





The technology will give 


| users remote access to Web- 


enabled applications, plus 
messaging and collaboration 
tools, through their browsers, 
Ross said. Dade Behring may 
eventually use the EX-1500 to 
support all of its 6,000 em- 


| ployees worldwide, he added. 


Because Dade Behring has 
remote workers who access 
data via Digital Subscriber 
Line and satellite connections, 
the company often experi- 
ences IPsec connection delays, 
Ross said. The EX-1500 offers 
“a nice alternative” to solve 
that problem, he added. 

For the past three years, 
Aventail has provided man- 
aged SSL VPN services to 
Fast-Tax, a Dallas-based ven- 
dor of tax preparation soft- 
ware that plans to begin beta- 
testing the EX-1500. Because 
no client software is required 
with the appliance, the cost of 
supporting connections to 500 
financial services firms that 
use Fast-Tax’s software should 
be reduced, said Jim Sergison, 
director of product marketing 
at the subsidiary of The 
Thomson Corp. B 
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Southwest Gives 
Net Nod to Sprint 


Sprint Corp. said it has won a 
three-year deal to provide voice 
and high-speed data networking 
services to Southwest Airlines 
Co. A Sprint spokesman said 
Dallas-based Southwest chose 
Sprint to deliver services similar 
to those that had been provided 
by WorldCom Inc. He described 
the contract as a multimillion- 
dollar deal. 


IBM Signs Chip 
Deal With AMD... 


IBM and Advanced Micro De- 
vices Inc. said they plan to jointly 
develop chip manufacturing proc- 
ess technologies aimed at pro- 
ducing faster and less power- 
hungry microprocessors. The 
first devices resulting from the 
deal will be produced using a 
65-nanometer manufacturing 
process and are expected to be 
ready for release in 2005, ac- 
cording to IBM and Sunnyvale, 
Calif.-based AMD. 


... And Switch 
Pact With Cisco 


IBM also announced that its 
storage division plans to resell 
Cisco Systems Inc.’s new MDS 
9000 line of switches for stor- 
age-area networks. IBM said 

it plans to begin offering the 
switches along with its disk and 
tape products by the end of this 
quarter. The deal is the first 
signed by Cisco for the devices, 
but EMC Corp. said it’s currently 
testing the switches. 


Short Takes 


MICROSOFT CORP. released a 
second beta-test version of its 
Exchange Server 2003 messag- 
ing software, which is code- 
named Titanium and due for 
shipment by the end of June. 

. .. STORAGENETWORKS INC., 

a storage management software 
vendor in Waltham, Mass., re- 
placed its CEO and laid off about 
half of its 220 workers. 


This is old hat to users of DB2, Oracle, 
SQL Server and Sybase. So much so that 
when one of the major vendors’ PR reps 
was asked about enterprise- 
level competition from 
MySQL, the amused response 
was a mocking, “Oh, pleeeze.” 
And Charlie Garry, an analyst 
at Meta Group, refers to 
MySQL as a “bare-bones data- 
base,” noting that the Big Four 
vendors are moving way be- 
yond MySQL’s capabilities 
with upcoming features that, 
for example, tie data ware- 
house functions with OLTP 


that in the coming years, My- Tir 
SQL might very well “follow 
the same path as Microsoft” 
with its SQL Server breaking 
slowly into companies as a 
departmental database server. 
He also points out that My- 
SQUL’s free GPL license is 
“seeding the market” for fu- 
ture growth. But for those 
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MARK HALL ®ON THE MARK 


| Database Giants Scoff at 
~ Open-Source Invader... 


... MySQL AB, not unlike how operating system behemoths once 
laughed off the Linux phenomenon. But Marten Mickos, CEO of the 
Uppsala, Sweden-based company, thinks 2003 may be the year the 
popular open-source database, MySQL, sneaks into the enterprise. Cur- 
rently, Version 3.2 is the most popular in the market, but MySQL 4.0 
ships in about a month, and the alpha release of 4.1, which includes 
nested SQL queries among other improvements, hits in two weeks. 
And, Mickos claims, Version 5’s alpha program for later this year will 
add enterprise-class features such as stored procedures and triggers. 


who want commercial licenses now, you 
can pick up one for $395 per server with 
no per-user charges, many thousands less 
: wee than you'd pay for Big Four 
software. And if you down- 
load it free from the Inter- 
net, you don’t even have to 
say please. ® Competition in 
the application storage manage- 
ment arena may get less polite 
with Mountain View, Calif.- 
based Veritas Software’s 
planned acquisition of Pre- 
cise Software Solutions in 
Westwood, Mass. Houston’s 
BMC Software has long been 
k a partner of Veritas, and Dan 
Hoffman, BMC’s director of 
enterprise storage manage- 
ment, refuses to say that the 
partnership will change, de- 
spite more direct competi- 
tion from Precise’s product 
line. But Hoffman says he 
does see the deal as an indica- 
tor of more consolidation in an 
overcrowded market. “There 


ry 





problems, sometimes some- 
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are too many storage software companies 
that cannot distinguish themselves,” he 
says. One way BMC hopes to stay ahead 
of the pack is by adding predictive work- 
load-based modeling features to its appli- 
cation storage management software. No 
simple task, Hoffman claims. Don’t ex- 
pect to see it before late 2003. Also, don’t 
expect to see other applications’ storage 
needs added to BMC’s Patrol Storage 
Manager. When asked whether Lotus 
Notes would be added to a list that in- 
cludes Oracle, SQL Server, Exchange, 
Sybase, DB2 and Siebel, Hoffman says 
nope. “I’ve heard requests for NetWare 
more often than for Notes.” That puts 

it way down the list. # While Linux is on 
most companies’ support lists, it isn’t on 
Unisys Corp.’s for the foreseeable future. 
According to David Houseman, VP of ad- 
vanced technology at the Blue Bell, Pa.- 
based server maker, the company’s focus 
is on giving Windows “mainframelike charac- 
teristics” on its ES7000 32-way comput- 
ers. To that end, Unisys will be releasing 
its Enterprise Application Environment 
(EAE) for Windows 2000 Data Center 
and .Net. EAE has been around for years 
in different guises on the company’s pro- 
prietary mainframes. Developers use 
high-level business rules and let EAE 
generate Java or .Net source code. Expect 
to see a beta version late this year. # In 
February you'll be able to get your hands 
on Visual Net 3.0 from Antarctica Systems 
Inc. in Vancouver, British Columbia. CTO 
Tom Bray, who’s also one of the origina- 


| tors of XML, calls the product a “visual 


browse engine.” It applies a map meta- 
phor for Web sites, letting users navigate 
through icons instead of text. The 3.0 re- 
lease adds Flash support and targets the 
retail and business intelligence vertical 
markets with preconceived glyphs and 
icons so you won't have to read all those 
confusing words. D 


routers and other network 





BMC Ships Consoles to 
Wrap Up Patrol Upgrade 


| BY MATT HAMBLEN 


BMC Software Inc. last week 
completed the rollout of its 
Patrol Version 7 enterprise 
management software, and 


clothing retailer The Men’s 


Wearhouse Inc. said it’s ready 


| to put BMC’s new network 


management consoles into 
production after a three- 
month test. 

Men’s Wearhouse, which 
operates more than 600 stores 
nationwide, uses Patrol to 





manage a network of 200 
servers at its Houston head- 
quarters. The Windows- and 
Web-based management con- 
soles now available for Patrol 
7 will help the retailer become 
more proactive in managing 
network growth, said Katie 
Scully, manager of enterprise 
management services. 

“It's the difference between 
fighting fires and being proac- 
tive,” she said. “Before Patrol 
came along, we’d react to 





thing as simple as running out 
of disk space.” Men’s Wear- 
house has used earlier ver- 
sions of Patrol for the past 
three years. With Patrol 7, the 
retailer expects to need fewer 
people to run its network. 
The new consoles provide 

network managers with the 
ability to assign rights and 
privileges to end users, and 


| centrally control security and 


authentication, according to 
Houston-based BMC. 

Scully said the Patrol up- 
grade also gives network man- 
agers a view of monitoring 
agents installed on switches, 





nodes, making it easier to re- 
motely install additional 
agents. “It actually reduces the 
time the network managers 
need to be here,” she said. 

The Web and Windows 
management consoles each 
sell for $3,500, said BMC, 
which also released software 
to manage the deployment of 
its products for Windows and 
Unix systems. 

Rich Ptak, an analyst at Ptak 
& Associates in Amherst, N.H., 
said BMC’s new consoles don’t 
leapfrog the ones offered by ri- 
vals. But he called BMC’s pric- 
ing competitive. D 
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HP ProLiant DL 580G2 Server 
with Intel’ Xeon 


Server time and space are precious commodities, at least trom where 
you're sitting. Your customers are clamoring for more, more, more, while 
you try to figure out how to deliver with less, less, less. 


HP ProLiant servers, powered by Intel® Xeon™ processors, put you in 
control of your resources so that you can realize the true potential of your 
infrastructure. ProLiant Essentials Workload Management Pack software 
lets you allocate your resources to specific tasks and then reallocate them 
as needed — automatically. We call it Dynamic Resource Scaling. And with 
this added control and increased visibility, you may even find you 
can boost efficiency by placing more workload on those same servers. 


It all adds up to faster, better distribution, increased ROI and gigantic 
leaps forward in customer satisfaction. Which, of course, is a relief to you 


Visit www.hp.com/go/proliant73 or call 1.800.282.6672, 
option 5, and mention code XFE for a white paper on 
adaptive infrastructure and a free trial of HP ProLiant 
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‘Tax Break Could Ease 
IT Purchasing 


High-tech groups hope stimulus plan 
will include boost to depreciation bonus 





BY PATRICK THIBODEAU 
WASHINGTON 
ORPORATE USERS 
may get a tax incen- 
tive to avoid delay- 
ing hardware and 
software purchases if congres- 
sional backers prevail in their 
efforts to increase the depreci- 
ation bonus. 

The bonus could influence 
the timing of business IT pur- 
chases, depending on when 
the move — if approved — 
takes effect. The current 
bonus, which was set at 30% 
last year by Congress, is on 
top of normal depreciation 
and has helped lower compa- 
nies’ year-end tax bills by in- 
creasing their write-offs. 

High-tech industry groups, 





which say 30% isn’t enough to 


State ClOs 


Layoffs, IT project 
cuts, pressure on 
vendors expected 


BY PATRICK THIBODEAU 
WASHINGTON 

The worst fiscal crisis to hit 
state governments since 
World War II is forcing state 
IT managers to lay off em- 
ployees, squeeze vendors for 
better deals and limit IT proj- 
ects to those that deliver an 
immediate return on invest- 
ment. Nothing less stands a 
chance. 

“It’s ugly. It’s really, really 
ugly is the best way I can de- 
scribe it,” said Connecticut 
CIO Rock Regan, referring to 
the state’s budget shortfall of 
more than $600 million. He 
has laid off 115 IT workers — 
11% of his staff — and it could 
get worse. 

Collectively, the states may 





stimulate spending, were dis- 
appointed by President Bush’s 
rejection of an expanded de- 
preciation bonus in the eco- 
nomic stimulus plan he an- 
nounced last week. But in an- 
other stimulus plan also re- 
leased last week, House De- 
mocrats proposed a 50% 
bonus for this year, a rate that 
the Information Technology 
Association of America in Ar- 
lington, Va., wanted in the 
president’s proposal. There 
are signs of Republican back- 
ing for that proposal as well. 


Case-by-Case Basis 
Whether a bonus will help a 
particular company depends 
on its business needs, say ana- 
lysts and IT managers. 

For instance, retailer Lowe’s 





Pain 


Cos.’ ongoing expansion, 
which included the opening of 
120 superstores in 2002 with 
plans for 130 more this year, is 
driving technology purchases, 
said Steve Stone, vice presi- 
dent of IT strategy at the 
Wilkesboro, N.C., company. 

But a depreciation increase 
could affect the timing of a 
purchase, if the planned date 
is close to when the tax break 
goes into effect, said Stone. 

That’s the case as well for 
Richard Jones, managing di- 
rector and CIO at Country- 
wide Home Loans Inc. in Cal- 
abasas, Calif., who said he 
doubts that the depreciation 
bonus would affect purchasing 
in any way other than timing. 
Business expansion is the 
overriding factor in IT spend- 
ing, he said. 

While the depreciation 
bonus applies to any equip- 
ment purchase, the IT equip- 


Face Budget Crises 


be facing a budget gap this 
year of as much as $20 billion, 
and potentially many times 
that amount for the next fiscal 
year, according to some esti- 
mates. The National Gover- 


| nors Association says there 
hasn't been a budget crisis like 


it in 50 years. 

Legislative sessions are 
starting this month, governors 
are releasing budgets, and 
lawmakers are getting ready to 
cut. Meanwhile, 


| state CIOs are doing 


what they can to 
prepare for cutbacks 
by pushing consoli- 


| dation and standard- 
ization of systems, 


examining the use of 
open-source alterna- 
tives and exploring 
new ways to finance 
projects. 

Texas CIO Car- 
olyn Purcell said 


| 
| 
| 
| 
| 


JAMES D 
says New York will 
eNom 


to save money. 


that if vendors “are sure that 
their product will save mon- 
ey,” then they should be pre- 
pared to accept payment out 
of the amount of money saved. 

The position of state CIO is 
relatively new in most states, 
and turnover is high. A major 
problem they face is fighting 
bureaucratic resistance to sys- 
tems consolidation. But that’s 
changing, some said. 

“There’s a reason why 
Southwest only flies 
737s and still makes 
money,” said Terry 
Savage, Nevada’s 
CIO, referring to 
Southwest Airlines 
Co.’s reliance on a 
single Boeing model. 
Agencies are now 
less eager to defend 
the support of multi- 
ple systems that are 
incompatible. The 
economic downturn 


LON 





| ment sector is especially in 


need of a boost. Hardware, 
software and services spend- 
ing declined 5.2% last year af- 
ter a 5.4% drop in 2001, ac- 
cording to IDC. 

And IT spending forecasts 
for 2003 are mixed. IDC ex- 
pects a 4.4% increase in U.S. 
IT spending this year to $383.1 
billion. In reports last week, 
Aberdeen Group Inc. in Bos- 
ton said it expects U.S. IT 
spending to increase 3.6%, but 
The Goldman Sachs Group 
Inc. in New York predicted a 
1% drop, based on a survey of 
100 IT managers at Fortune 
1,000 companies. 

Analysts and trade groups 
have yet to determine whether 
the 30% depreciation bonus 
has helped IT spending. 

“It’s too soon for any of 
those forecasting numbers to 
show that,” said Caroline 
Graves Hurley, a policy expert 
at AEA, a high-tech trade asso- 
ciation in Washington. “But I 
do think there has been a slug- 
gish response.” 

IDC economist Kevin White 
said the forecast increase in IT 
spending has more to do with 
economic improvements and 


“is changing the discussion,” 
Savage said. 

In New York, CIO James 
Dillon intends to standardize 
the state’s e-mail system. State 
workers now use three major 
systems, as well as a host of 
mainframe proprietary sys- 
tems. “We will decide on 
one,” said Dillon, who has 
about 150,000 end users to 
deal with. 

State agencies “are more ac- 
cepting of change, provided 
we can show that a business 
case will result in cost sav- 
ings,” said Dillon. 

But the budget crisis also 
means that projects with a re- 
turn on investment beyond 
one or two years, such as 
many e-government or Web 
services projects, are unlikely 
to get funding. 

“We can’t get to the point 
where anybody wants to talk 
about spending money to save 
money down the road,” said 
Regan. 

But efforts by state CIOs to 
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How It 
Works 


Congress last year approved a 
30% depreciation bonus that 
remains in effect until Sept. 11, 
2004. There is a push to increase 
it to 50% or more. 


EXAMPLE: Your firm just 
bought a $100,000 system. 


= Normal depreciation is 20% 
over five years. The 30% bonus 
increases that depreciation to 
50% in the first year. 


= Ata 40% tax rate, the tax sav- 

ings on the 20% depreciation is 

$8,000. At 50%, it's $20,000. 
corporate profits than with a 
tax break. “The biggest driver 
is the continuing improve- 
ment of the economy,” he said. 

Companies may not have to 
hold back on purchases. The 
30% bonus was retroactive to 
September 2001, and Peter 
Rugg, a corporate finance ex- 
pert at Tatum CFO Partners 
LLP in New York, said that 
historically, lawmakers have 
made these kinds of incentives 
retroactive. D 


consolidate and standardize, 
for instance, could be hurt if 
funding for centralized IT 
agencies is cut deeply and 
power shifts back to state 
agencies, said former Georgia 
CIO Larry Singer. CIOs could 
find themselves “taking a step 
back,” said Singer, who moved 
last month to the not-for-prof- 
it public-sector consulting 
firm Public Interest Break- 
throughs Inc. in Vienna, Va. 

Although the budget prob- 
lems are creating some oppor- 
tunities to gain efficiency 
through consolidation and 
standardization, there’s no 
getting around the pain. 

North Dakota CIO Curtis 
Wolfe has been gradually let- 
ting his consultants go and do 
ing what he can to save his IT 
workers from layoffs. 

State agencies have been 
told that budgets will be 95% 
of last year’s, and that’s just 
for starters. “We've just got to 
reduce our cost of operation 
where we can,” said Wolfe. B 
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Singlestep Readies Network 
Management Integration ‘Tool 


Start-up seeks to broaden capabilities of 
‘manager of managers’ technology 


BY MATT HAMBLEN 
INGLESTEP Technolo- 
gies Corp. this week 
plans to ship a tool for 
integrating different 
network management systems, 
a move analysts described as 
another effort to find the Holy 
Grail of network control prod- 
ucts known as a “manager of 
managers” (MOM). 

Two Seattle-based compa- 
nies, Alaska Air Group Inc. 
and national broadband ser- 
vices provider Speakeasy Inc., 
last week said they’re evaluat- 
ing Singlestep’s Unity soft- 
ware to see if it can live up to 
the promise of combining in- 
formation pumped out by var- 
ious network monitoring and 
management systems. 

“Getting to network infor- 
mation as quickly as possible | 
is important, so if you have a 





tool to look at all the network 
management sources, that 
would be a terrific benefit,” 
said Jeffrey Hervin, network 
operations manager at Alaska 
Air Group’s Alaska Airlines 
unit. He declined to discuss 
the evaluation further. 

Danny Pickford, director of 
engineering at Speakeasy, said 
Unity looks to be “useful, be- 
cause it can query data from 
disparate network sources and 
put it together, as well as filter 
out unimportant things.” 

The initial release from 
Seattle-based Singlestep will 
integrate data from up to sev- 


| en network management 


sources, including Hewlett- 
Packard Co.’s OpenView and 
Cisco Systems Inc.’s Works. 
But Unity eventually will be 
able to perform logical analy- 
ses of network problems and 


Feds Drop Wall Street IT 
Disaster Recovery Proposal 


Implementation 


labeled unfeasible 


BY LUCAS MEARIAN 
A US. senator this month said 
federal regulators have aban- 
doned a proposal that, if made 
law, could have required Wall 
Street firms to move their dis- 
aster recovery data centers 
hundreds of miles away from 
their primary IT facilities. 
That idea was included in an | 
interagency white paper, re- 
leased in August, on strength- 
ening the resilience of the U.S. 
financial system. However, fi- 
nancial services firms criti- 
cized it as unnecessary and 
technically unfeasible. For ex- 
ample, Fibre Channel, the 
most common network proto- 
col used between data centers, 


} 
| 





has a distance limit of about 
100 kilometers, or 62 miles. 
Sen. Charles Schumer (D- 
N.Y.) based his analysis of the 
regulators’ plans on a Dec. 23 
letter that was sent to him by 
the heads of the Federal Re- 
serve System, the Office of the 
Comptroller of the Currency 
and the Securities and Ex- 
change Commission. 
Schumer is a member of the 
Senate Banking Committee, 
which has oversight of federal 
financial agencies. He said the 
letter stated, in part, that the 


| draft white paper had been in- 


accurately described in public 
accounts and didn’t set min- 
imum distance requirements 
or recommend “as a sound 
practice that firms move out 
of center-city locations.” 
However, the white paper 





then send reports to network 
architects, Pickford said. “I’m 
really excited about that po- 
tential,” he added. 

Speakeasy operates ll points 
of presence in North America 
for Digital Subscriber Line 
services and has a network 
with 400 switches, routers and 
other nodes in Seattle. Pick- 
ford said he hopes to use Uni- 
ty to improve load balancing 
across Speakeasy’s network. 

Michael Disabato, an analyst 
at The Burton Group in Salt 
Lake City, said Unity fits under 
the heading of MOM technolo- 
gy, which first arose more than 
10 years ago. Other vendors, 
such as System Management 
Arts Inc. in White Plains, N-Y., 
and Aprisma Management 
Technologies Inc. in Ports- 
mouth, N.H., also provide low- 
cost tools with MOM-like ca- 
pabilities. But most of the 
products can read data only 
from devices based on the Sim- 
ple Network Management Pro- 


did suggest the use of out-of- 
region IT backup facilities. It 
also posed a series of IT-relat- 
ed questions, including one 
that asked whether a minimum 
distance between primary and 
backup data centers should be 
required “for core clearing 
and settlement organizations 
and firms that play significant 
roles in critical markets.” The 
paper listed a distance of 200 
to 300 miles as an example. 





tocol (SNMP), Disabato said. 
In contrast, Unity can read 
non-SNMP data and even Web 
page reports that are pushed 
to the software. That could in- 
clude information from cir- 
cuits that are monitoring bur- 
glar and fire alarms, power 
supplies and temperature con- 
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trols, according to Disabato. 
In addition, Unity is priced 
far below high-end MOM 
products from IBM’s Tivoli 
unit and Computer Associates 
International Inc., which can 
cost a large company millions 
to implement, Disabato said. 
Unity prices start at $75,000, 
but a typical installation that 
includes managed services 


| provided by Singlestep and 


can monitor five to seven net- 
work management systems 
will cost about $250,000, said 
Singlestep CEO Chris Noble. D 


Singlestep’s Unity Server 


Connectors 


Data sources and 

connectors of net- 

work monitoring and management tools, 
such as CiscoWorks and HP OpenView, 
are collected and combined into a com- 
mon view by the Unity engine. 


Network manages 
access data gathered 
by unity. 


Client 


In one of dozens of respons- 
es to the white paper, PNC Fi- 
nancial Services Group Inc. in 
New York said in an October 
letter to the Federal Reserve’s 
board of governors that disas- 
ter recovery requirements 


| must be technologically at- 


tainable. 

“Under most disaster sce- 
narios, technology backup re- 
covery sites do not need to be 


| more than a few miles apart to 


Data Center Protection Practices 


The federal white paper on strengthening the dis.ister recovery practices of 
the U.S. financial system asked the following {T-related questions: 


SHOULD some minimum distance between primary and backup data 


centers be specified? 


SHOULD backup sites not be dependent on the same labor pools or 
infrastructure components as main data centers? 

ARE there alternative arrangements that woulc provide sufficient 
resilience for facilities within a single region? 





Enterprise policies for actions in case of 
outages or errors are stored for compari- 
son to actual events by the Unity engine. 


adequately recover the prima- 
ry site,” PNC said. 

The Banking Information 
Technology Secretariat 
(BITS), a Washington-based 
organization made up of the 
100 largest financial services 
firms in the U.S., also filed a 
comment letter in October. 

“The regulators are trying 
to do the right thing, but let’s 
do it in a way where we don’t 
impose excessively high costs 
or implement something that 
is technologically not possible 
to do,” John Carlson, senior di- 
rector of BITS, said this month. 

Many New York-based fi- 
nancial services firms already 
have disaster recovery sites in 
New Jersey or in boroughs of 
the city outside of Manhattan. 
But Larry Tabb, an analyst at 
TowerGroup in Needham, 
Mass., said the government’s 
obvious concern is that in the 
event of a nuclear attack on 
New York, backup facilities 
would likely be destroyed. D 
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Storage Vendors 
See Stronger Q4 


EMC Corp. said its fourth-quar- 
ter financial results should top 
expectations, with revenue total- 
ing at least $1.47 billion. That's 
up from a projection of about 
$1.26 billion that EMC made dur- 
ing the quarter. However, EMC 
said it still expects to report a 
loss because of a $160 million 
restructuring charge. Storage 
Technology Corp. in Louisville, 
Colo., and McData Corp. in 
Broomfield, Colo., aiso raised 
their fourth-quarter guidance. 


IBM to Outsource 
Production Work 


IBM announced that San Jose- 
based Sanmina-SCl Corp. will 
take over manufacturing of “a 
significant portion” of its low- 
end and midrange xSeries 
servers and IntelliStation work- 
stations in a deal valued at $3.6 
billion over three years. IBM also 
said it’s outsourcing a refurbish- 
ing center for leased IT equip- 
ment to Milpitas, Calif.-based 
Solectron Corp. 


SAP Reorganizes, 
Cuts Sales Force 


SAP AG said it laid off about 130 
workers at its U.S. subsidiary in 
Newtown Square, Pa., as part of 
a sales force reorganization. 
SAP America Inc.'s sales per- 
sonnel will now work on a re- 
gional basis instead of focusing 
on vertical industries, the com- 
pany said. About one-third of the 
jobs that were cut will be rede- 
fined and filled again, SAP said. 


Short Takes 


AT&T CORP. said it plans to lay 
off 3,500 of its 72,000 workers, 
with most of the cuts coming at 
its business services unit. . . . 
IBM said it’s transferring Al Zol- 
lar, general manager of its Lotus 
Software Group, to a new job 
heading the unit that develops its 
iSeries servers. 





NEWS 


IBM Offers On-Demand 
Service for High-End Use 


| Option will enable companies needing 


supercomputer power to lower costs 





BY JAIKUMAR VIJAYAN 
BM LAST WEEK launched 
a capacity-on-demand 
option under which com- 
panies with high-perfor- 
mance computing require- 
ments will be able to rent su- 
percomputing power on an 
as-needed basis. 

The service will provide 
companies in sectors such as 
energy and financial services 
with quick access to the com- 
puting resources they need 
without the high fixed costs 
usually associated with super- 
computing, said Dave Jursik, 
an IBM vice president. 

Under the program, users 
will be able to rent capacity 
from either IBM Power archi- 
tecture-based supercomputers 
or Intel Corp.-based high-per- 
formance Linux clusters. IBM 


| will charge customers based 
on the capacity used and dura- 
tion of use. 

The approach makes partic- 
ular sense for companies that 
want access to extensive com- 
puting resources for short pe- 
riods of time, Jursik said. 

“Tt will allow them to elimi- 
nate large fixed costs and have 
a variable-cost infrastructure 
instead,” he said. 

PGS Geophysical, an Oslo- 
based company that provides 
imaging services for large oil 
companies, expects to save 
about $1.5 million annually on 
equipment-related costs under 
this approach, said Christo- 
pher Usher, the company’s 
president of data processing. 

PGS usually leases or buys 
outright the supercomputing 





capacity it needs from IBM. 


But the company recently 
signed up for the on-demand 
option and is using rented su- 
percomputer capacity for an 
advanced seismic imaging 
project in the Gulf of Mexico. 
Under the arrangement, 
PGS sends disks containing 
seismic data to IBM, IBM 
loads and processes the data 
on its supercomputers, and 
| users at remote PGS locations 
can access the data via the 





SGI Offers Itanium 2-Based Linux Systems 


Altix servers to 
complement Irix 
BY TOM KRAZIT 

Silicon Graphics Inc. last week 
announced systems that com- 
bine the Linux operating sys- 
tem with Intel Corp.’s Itanium 
2 processor to create a non- 
proprietary server that can 
scale up to 64 processors. 

The Altix 3300 and Altix 
3700 run on a standard version 
of Linux that’s compatible 
with Red Hat Inc.’s Linux Ver- 
sion 7.2. The Altix 3300 can be 
configured with a single node 
of four to 12 Itanium Z proces- 
sors, and the Altix 3700 can 
use 16 to 64 Itanium 2 proces- 
sors in a node. 

Each node contains a single 
Linux operating system image 
and up to 512GB of memory. 
The Altix 3000 machines will 
be ideal for clustering, be- 


cause SGI’s NUMAlink inter- 
connect technology lets users 
connect nodes and share 
memory across processors, ac- 
cording to Jan Silverman, se- 
nior vice president of market- 
ing at Mountain View, Calif.- 
based SGI. 

SGI will support clusters of 
up to 512 processors this year 
and allow users to build clus- 
ters of more than 1,000 
processors next 
year, said Andy 
Senselau, prod- 
uct manager for 
the Altix 3000 
family. 

The Itanium 2 
processor offers 
Altix users the 
ability to run 64- 
bit applications 
at high levels, 
SGI said, point- 
ing to several 
positive bench- 
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| marking results for the Altix 
system using tests from Stan- 
dards Performance Evaluation 

Corp. in Warrenton, Va. But 

users of 32-bit applications 

won't be able to run those 
programs any faster than an 
ancient 356-MHz processor 
could, said Nathan Brook- 
wood, a principal analyst at 

research company Insight 64 

in Saratoga, Calif. 

“Anything used 
on a day-to-day 
basis that requires 
significant com- 
putational ability 
will need 64-bit 
adaptations,” he 
said. This means 
users have to re- 
compile their old- 
er applications to 
realize the perfor- 
mance benefits of 
the Itanium 2. 

The company’s 
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Internet or dedicated lines. 

“Capacity on demand is 
something that we have been 
talking about for some time as 
an alternative way to get com- 
puting capacity,” Usher said. 
“The savings come from not 
having to pay for your com- 
puters when you are not using 
them.” 

The new supercomputing 
capacity-on-demand option is 
an example of the kind of ser- 
vice users can expect to see 
IBM deliver under the On- 
Demand initiative recently 
outlined by CEO Samuel J. 
Palmisano, Jursik said [Quick- 
Link 34091]. 

Initially, much of the inter- 
est in this kind of service will 
come from a narrow set of 
users with very periodic but 
well-defined needs for com- 
puting power, said Mike Kahn, 
an analyst at The Clipper 
Group Inc. in Wellesley, Mass. 

Though such pay-as-you-go 
arrangements have been avail- 
able on a sporadic basis for 
years, IBM’s announcement 
last week marks the first time 
such an option is being offered 
on commercial RISC and Intel 
servers, Kahn said. D 


target market of researchers 
and creative professionals 
has been clamoring for a 
Linux operating environment 
that will let them break free 
of their dependence on 
proprietary platforms, Silver- 
man said. 

However, SGI also manufac- 
tures a line of proprietary sys-- ‘ 
tems, the Origin 3000 family, 
that comes with the compa- 
ny’s Irix operating system. 
The new Altix machines let 
SGI tap into the rapidly grow- 
ing Linux market while it con- 
tinues to offer the advanced 
features of Irix to users who 
are willing to pay a premium, 
Silverman said. 

“Trix has application capa- 
bility that isn’t present in Lin- 
ux. People depend on the reli- 
ability and security features 
within Irix, and it’s not easy to 
put those features into Linux,” 
Silverman said. 

Krazit is a reporter for the IDG 
News Service. 
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and Microsoft Office XP Professional. Want specific examples? 
The Group Policy feature in Windows XP Professional lets 
you define related user groups and then easily assign security 
settings to the group as a whole. Office XP Professional 





offers Macro Virus Protection, which lets you easily configure 


applications to help prevent users from running the macro 
attachments that most viruses use. Want more reasons to 
upgrade? Visit microsoft.com/desktop 
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Continued from page 1 
Energy Market 


sees the six-state region’s bulk 
power system and wholesale 
electricity market, this week 
plans to conduct its third ex- 
ternal trial of the new system. 
The test, which is expected to 
be the final one, will involve 
an unspecified number of 
electricity generators and dis- 
tributors and is aimed at gaug- 
ing the technology’s readiness. 

The system is built around 
more than 400 servers, includ- 
ing eight of Hewlett-Packard 
Co.’s AlphaServers. It’s being 
designed to let market partici- 
pants buy and sell electricity 
at prices that are set one day 
before transactions take place 
and then in real time to reflect 
changes in the market. ISO 
New England officials said the 
company is developing the 
system with help from Alstom 
Corp., a Bellevue, Wash.-based 
software vendor. 

The technology being im- 
plemented at ISO New Eng- 
land’s facilities here is based 
on a system Alstom created 
for PJM Interconnection LLC, 
an independent system opera- 
tor (ISO) in Norristown, Pa. 
But ISO New England has 
worked with Alstom and con- 
sultants such as Stamford, 
Conn.-based GRT Corp. to 
customize the system. 

For example, the company 
added features that let market 
participants account for losses 
that can occur on transactions, 
plus capabilities to handle hy- 
droelectric dispatches from 
sellers to buyers, said Gordon 
van Welie, ISO New England’s 
president and CEO. 

In addition to the Alpha- 
Server hardware, which HP 
acquired through its purchase 
of Compaq Computer Corp., 
ISO New England’s system 
uses Oracle databases and Lin- 
ux servers. Work on the proj- 
ect started in May 2001. 

The system includes so- 
called multisettlement capa- 
bilities, which let buyers and 
sellers agree on binding prices 
prior to an electricity trade or 
as it happens. Now ISO New 
England operates a single-set- 
tlement system that shows a 


| 





Other ISOs Also Prepare for Market Standardization 


ISO New England may be ahead of 
the game in taking steps to com- 
ply with FERC’s standard market 
design proposal, but that doesn't 
mean other energy industry ISOs 
are standing still. 

For instance, California ISO 
is trying to address problems with 
its market structure that helped 
contribute to the California energy 
crisis in 2000 and 2001. The Fol- 
som, Calif.-based company is 
shifting from a management sys- 


| single price to users. The new 


system also adds congestion 
management features for deal- 
ing with transmission conges- 
tion and differences in power 
consumption by regions. 

ISO New England’s efforts 
map with guidelines for ex- 
changing data electronically 
that are being crafted by the 
Federal Energy Regulatory 
Commission (FERC) in an ef- 
fort to make the electricity 
market more competitive. 

Because the six ISOs that 
operate in the U.S. have their 


| Continued from page 1 


AlphaServer 


chitecture that allows users to 
add processors, memory and 
/O capacity “almost like Lego 
blocks,” according to informa- 
tion posted on HP’s Web site. 

The servers will support 
multipath I/O technology for 
greater system availability and 
dynamic partitioning capabili- 
ties. The servers also come 
with a new system manage- 
ment console designed for 
centralized administration. 

HP’s Marvel plan says a lot 
about the company’s intent to 
stick with its postmerger 
product commitments, said 
Fernando Yson, systems man- 
ager at Unicare/Cost Care. 
The Huntington Beach, Calif.- 
based health insurer has sev- 
eral small to midsize Alpha- 
Servers running homegrown 
applications. 

When the time comes for an 





tem that breaks up the California 
energy market into just three re- 
gions to a new approach that 
would divide the market into 
dozens or even hundreds of re- 
gions, said spokesman Gregg 
Fishman. 

Fishman said the new ap- 
proach, as well as IT systems that 
will support it, should be in place 
later this year. In addition, Califor- 
nia ISO this month plans to issue a 
request for proposals to technolo- 


own operating rules and pro- 
cedures, attempts to seamless- 
ly exchange data now are “like 
having railroads with different 
gauge tracks,” said van Welie. 
The ISOs probably won’t be 
required to meet the require- 
ments envisioned by FERC’s 
standard market design pro- 
posal until later this year or 
2004. ISO New England plans 


| to make any necessary 


changes to its new system in 
future upgrades, said van 
Welie and CIO Jamshid Afnan. 
But they added that the com- 


upgrade, it will most likely be 
to Itanium instead of Alpha 
because of HP’s road map, 
Yson said. “But we are going 
to wait for other users to test 
it first before migrating.” 

The Pittsburgh Supercom- 
puting Center, which has beta- 
tested the EV7-based servers, 
has ordered a “fair amount” of 
the systems, said Michael 
Levine, scientific director at 


the federally supported center. 


The new servers will sup- 
plement the organization’s ex- 
isting 3,000-node AlphaServer 
cluster, the largest nondefense 
supercomputer in the country, 
according to Levine. The 
servers’ very high bandwidth 
performance and interconnect 
technologies are what make 
them appealing, Levine said. 

HP’s decision to switch its 
server technology to Itanium 
in the future “doesn’t make 
things any easier,” said Levine. 
“But it is the sort of thing peo- 
ple are used to and should in 





gy vendors for bids on a transmis- 
sion congestion management sys- 
tem. Fishman said he expects that 
system to be operational by early 
spring next year. 

Because FERC’s proposed 
guidelines were modeled to a great 
extent on ISQs in the Northeast, 
Guilderland, N.Y.-based New York 
ISO is already “closely aligned” 
with the proposal, said company 
spokesman Steve Sullivan. 

New York ISO is working with a 


pany wanted to get started in 
advance because the system 
should make its energy market 
operate more efficiently. 

ISO New England’s IT ini- 
tiative “appears to put them 
ahead of the curve” on FERC’s 
standardization proposal, said 
John Fringer, vice president of 
power services at Nicor Ener- 
gy LLC, a natural-gas and elec- 
tricity marketing company in 
Lisle, Ill. But, Fringer added, it 
will be “quite a task” to get the 
various ISOs and other market 
participants to adopt a com- 


» 


most cases be manageable. 
The new capabilities make 
for “faster, better, cheaper sys- 
tems with much higher perfor- 
mance and much lower laten- 
cy” than previous-generation 
Wildfire AlphaServers, said 
Terry Shannon, publisher of 
“Shannon Knows HPC,” an Al- 
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division of ABB Ltd., a Zurich- 
based vendor of power and auto- 
mation technology, to develop a 
multisettlement system to replace 
its existing one, said Sullivan. The 
system is expected to cost “tens 
of millions of dollars” to develop 
and should be ready by mid-2004, 
he said, adding that the develop- 
ment schedule would be in line 
with FERC’s vision for standardiz- 
ing the national energy market. 

- Thomas Hoffman 


mon data-exchange format. 
“We’ve been impressed with 
what ISO New England has 
done here,” said Mike Roan, a 
regulatory specialist at Exelon 
PowerTeam, a marketing group 
of Kennett Square, Pa.-based 
Exelon Corp. Roan said he ex- 
pects to get several business 
benefits from the new system, 
including increased access to 
information about the cost of 
energy consumption in differ- 
ent areas and where it would 
make the most sense to add 


| generating plants. D 


buquerque, N.M.-based news- 
letter. The new servers should 
appeal to many larger users 
that would need years to mi- 
grate off Alpha, Shannon said. 

Still, the migration issue is a 
thorny one. 

“Last year, I would have said 
that this was some really great 
and exciting technology,” said 
Rich Partridge, an analyst at 
D.H. Brown Associates Inc. in 
Port Chester, N-Y. But with 
Marvel likely to be the Alpha 
family’s last hurrah, users 
must get commitments from 
HP that guarantee investment 
protection when they move to 
Itanium processors, he said. 

HP has said it will support 
the Alpha installed base for as 
long as necessary. Its Alpha- 
Server customer assurance 
program offers money-back 
guarantees, technology-refresh 
incentives, guaranteed trade-in 
values and transition lease pro- 
grams for systems purchased 
through December 2003. B 
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Geac Adds CTO, Looks to Integrate Apps 


BY MARC L. SONGINI 
Geac Computer Corp. last week hired 


a new executive to manage both prod- 
uct development and internal IT oper- 


ations as part of the business applica- 

tions vendor’s plan to prop up its sag- 

ging revenue and woo new users. 
Markham, Ontario-based Geac an- 
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| nounced that Timothy Wright is taking 
over as its chief technology officer and 
CIO. Wright, who previously held sim- 
ilar posts at Barcelona, Spain-based In- 
ternet service provider Terra Lycos SA, 
will oversee the planned development 
of a fully integrated suite of front- and 
back-office applications that support 
business-performance 
management. 

“There’s a huge opportu- 
nity for Geac to exploit the 
very high-quality installed base we 
have today — if we can put together 
the right collection of offerings [for] 
complete financial or operational per- 
formance management, and if we can 
integrate them with existing back-end 
solutions,” Wright said. 

Geac’s revenue fell to $201.5 million 
in the first six months of its fiscal year, 
through Oct. 31, down from $232.4 mil- 
lion a year earlier. 

As part of its effort to rebound, the 
company also is buying Extensity Inc., 
an Emeryville, Calif.-based vendor of 
employee expense, procurement and 
billing software, in a deal that was an- 
nounced in August and is due to be 
completed next month. 

Wright said Geac plans to more 
tightly couple Extensity’s software 
with its own applications, building on 
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a lower level of integration that’s al- 
ready in place. The move is intended 
to let Extensity users access data in 
Geac’s back-office software, as well as 
in rival applications from vendors such 
as PeopleSoft Inc. and Oracle Corp. 

Geac also is evaluating how to pro- 
vide a middleware and Web services 
framework to its users, according to 
Wright. That may involve combining 
internally developed software or some 
of Extensity’s technology 
with functionality gained 
from partnerships or an- 
other acquisition, he said. 

John Hagerty, an analyst at AMR Re- 
search Inc. in Boston, said Geac in the 
past bought rival software vendors 
without fully exploiting the inherited 
technology. But now the company is 
taking “a more aggressive stance with 
partnerships and acquisitions,” Hager- 
ty added. 

The new capabilities Geac is looking 
to field through the Extensity deal 
might be a good fit at GenCorp Inc.’s 
Aerojet-General Corp. division, said 
Michael Hursey, a financial specialist 
at the aerospace and defense manufac- 
turing operation in Sacramento, Calif. 

Because Aerojet works extensively 
for the government, it’s required to do 
frequent audits of travel costs and oth- 
er expenses, Hursey noted. Aerojet has 
been running Geac’s M Series finance 
applications since 1990, he said. DB 





McDonald’s Ends Network 
Project in Cost-Cutting Move 


BY TODD R. WEISS 
The new senior management team at 


| McDonald’s Corp. is looking to cut 


costs, and IT is one of the departments 
feeling the pinch. 

McDonald’s this month confirmed 
that it has stopped work on a network- 
ing project to connect about 30,000 
restaurants worldwide to its headquar- 
ters in Oak Brook, Ill. The fast-food 
chain wouldn’t disclose the project’s 
total budget, but spokeswoman Lisa 
Howard said McDonald’s will save 
“tens of millions of dollars” this year 
by curtailing the networking initiative. 

The company also wouldn’t say how 
many IT staffers were working on the 
project, which was known as Innovate. 
An internal memo about the project’s 
demise said job cuts could follow, al- 
though it added that McDonald’s will 
try to minimize any layoffs. 

Innovate began in 1999 and was ex- 
pected to help make McDonald’s oper- 





ations more efficient by integrating all 
of its restaurants in 121 countries. De- 
ployment of the network was due to 
start this year in Canada and France. 

But the project was scrapped be- 
cause it “was not going to deliver near- 
term benefits” at a time when McDon- 
ald’s is trying to improve its financial 
position, Howard said. She added that 
Innovate is now viewed as too costly 
compared with the operating improve- 
ments it was supposed to produce. 
“We have other ways to achieve [effi- 
ciency goals],” Howard said. 

The decision on Innovate follows 
the hamburger chain’s first-ever quar- 
terly loss. McDonald’s last month also 
announced a series of management 
changes, naming a new CEO, chief op- 
erating officer and vice chairman. 

“Our new management team is fo- 
cusing on the near term,” Howard said. 
“They’re looking at everything ... and 
reviewing all aspects of our business.” D 
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are other ways, too. We'll help find the one that’s best. So storage administration takes a smaller bite out of your day. Learn more 


about this story and other ways we can help you at www.savetheday.com one STORAGETEK’ Save the Day” 
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PATRICIA KEEFE 


No Rest in 2003 


ANUARY IS THE MONDAY OF THE YEAR. 
The big-sigh, gotta-get-back-to-it, foot-drag- 
ging mentality permeates everything. It’s ex- 
cessively gray and filled with humorless re- 
solve. Even so, a spanking new year is still 
cause for hope and excitement. 
You might think that the continued theme of IT 
making do with less will ensure a low-key, running- 


in-place kind of existence. 
In fact, a lot is under way 
that will need action from 
IT. Hot spots include the 
following: 

The transformation of some 
blue-chip IT providers. As a 
recent Business Week 
headline put it, “The new 
HP — how’s it doing?” 

Sure, postmerger, 

Hewlett-Packard CEO 

Carly Fiorina has man- 

aged to shed Compaq’s 

Michael Capellas, cut 

18,000 people and push up 
revenue. Several analysts rewarded 
the company last week by raising 
their 2003 forecasts. 

But being the queen of printers 
won't take Fiorina very far. She needs 
to reignite overall sales growth, bol- 
ster a sagging enterprise computing 
operation, fend off Dell, meld two 
huge companies, keep customers hap- 
py and make more money. 

IBM, meanwhile, under its new 
CEO, is pushing yet another all- 
encompassing new concept — “auto- 
nomic computing” — and has bought 
or is teaming up with all sorts of new 
partners, from Rational Software to 
AT&T. 

The paths HP and IBM take, and 
the success they find, will affect most 
Fortune 1,000 IT shops in one form or 
another. 

Balancing security needs with competing 
issues. Ironically, the first casualties 
of the war on terrorism are likely to 


be civil rights and privacy. But it won't | 


stop there. The government will de- 
mand that reluctant corporations 
play ball on issues such as prompt 
and full disclosure of enterprise 
break-ins. Can customer and corpo- 





| 
| 
| 
| 
| 


| 
rate data be protected? 
IT pros will have to 
walk a fine line to make | 
sure that patches don’t in- | 
terfere with other applica- 
tions, that users have suf- 
ficiently quick data access 
and that key internal in- 
formation isn’t handed 
over to outside companies 
in the name of increased 
security. 
We’re from the government, 
and we're looking to regulate. 
“Danger, Will Robinson!” 
The feds and Capitol Hill 
are nosing around big-time in IT’s 
backyard. Internet taxes, intellectual 
property, privacy safeguards, e-mail 
archiving procedures, cybercrime re- 
porting, security certifications, data 
protection and more are under debate 
at various levels in Washington. And 





actual legislation is looking likely. Al- 
ready, we’re seeing in some states the 
institution of “do-not-call” lists, 
stymieing telemarketers. It’s worth 
keeping an ear to the ground and 
thinking ahead to how any legislation 
that passes will affect your company. 

You've got mail - way too much of it. A 
new report from Ferris Research 
claims that spam accounts for 15% to 
20% of what’s in the corporate mail- 
box and will cost U.S. companies 
more than $10 billion this year. There 
are existing and pending regulations 
regarding e-mail archiving. Instant 
messaging services and usage have 
exploded. Messaging issues must be 
dealt with in 2003. 

Little IT: wireless networks, the prolifera- 
tion of handhelds and the arrival of even more 
small, mobile devices. As equipment 
makers insert Wi-Fi into mobile de- 
vices and coalitions form to create 
Wi-Fi networks, the technology will 
become ubiquitous. Pricing for hand- 
helds is dropping, and even more 
nifty devices are on the horizon, 
which means adjustments in mobile 
policies and security and in commu- 
nications infrastructures. 

I’m out of space, and I’ve barely 
scratched the surface. No matter 
what’s on your list, there’s going to be 
plenty of action and fireworks to keep 
even the sleepiest of IT shops on the 
alert in 2003. Dd 
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PIMM FOX 


Don’t Leave 
OS Choice to 
Developers 


HE PAIN IN MY HEAD 

isn’t from a wild New 

Year’s, but from the 
torrent of e-mails I’ve been 
reading from eager and enthu- 
siastic Linux fans responding 
to a recent column [QuickLink 35071]. 
Indeed, at the risk of igniting more 
claims of my alleged Microsoft bias 
and my personal stupidity, I think it 
fair to respond to some of the general 
protests. 

First, I believe IT managers should 
dictate the operating system of choice 
for an organization, not developers, 
who overwhelmingly 
wrote to me about 
the virtues of Linux. 

If your company 
wants to run Micro- 
soft Access or Office 
2000 instead of Star- 
Office, then your 
operating system 
choice is going to be 
made for you without 
regard to TCO or the 
technical advantages 
of Linux. 

Second, perhaps I didn’t make it 
clear: If you want to run something 
generic, such as a Web server farm, 
and you're not dependent on an NT 
domain, go ahead and run Apache on 
Linux. It’s fairly cheap, and yes, as 
dozens of you told me, it’s stable. 

But what if you want to run a Web 
site programming environment like 
ColdFusion? It runs only in certain en- 
vironments, and I have yet to see one 
in Linux (though I’m willing to learn). 

What I did learn from all the e-mails 
is that Linux has become an emotional 
touchstone for developers. And that, 
I’m afraid, doesn’t wash. 

Choosing an operating system 
shouldn’t depend on developer prefer- 
ence, but on what the organization 
needs to do. Sure, a developer may 
choose Linux with 4 million lines of 
code vs. .Net with 30 million, but devel- 
opers get paid to develop based on end- 
user needs. The mission determines 
the tools, not the other way around. 

People have derided Cobol, IBM’s 
procedural language, since the 1960s. 
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It’s been called the most verbose and 
inelegant of computer languages, and 
yet there are more lines of Cobol 
pumping out paychecks than anything 
else. So despite its Cobol-like bulk and 
clumsiness, Windows’ ubiquity and 
usefulness make it vital if you’re trying 
to make a deadline using PageMaker 
or Photoshop; they don’t run on Linux. 
Finally, one e-mail blasted me by 
saying that scientists at the Fermi Na- 
tional Accelerator Laboratory use Lin- 
ux, from the desktop to supercomput- 
ers. That makes sense — they’re high- 
ly technical professionals, most of 
whom can write their own programs 
and have experience with Unix. Mak- 
ing them switch to Windows wouldn't 
make sense. What I tried to stress was 
that there are no general rules for 
Linux TCO. Rather, you’ve got to do 
your own homework, without getting 
worked up into a fanatical froth. D 


DAVID MOSCHELLA 
‘Utility’ 
Model Needs 
Better Focus 


ECENTLY, there has 

been a great deal of 

talk about the viability 
of the “utility model,” the idea 
that information, just like wa- 
ter, gas, electricity and phone 
service, should be provided 
on demand via some sort of largely 
transparent conduit. It’s an important 
concept and already a powerful IT in- 
dustry trend, but I suspect I’m not the 
only one perplexed by the odd discon- 
nect between rhetoric and reality. 

Part of the problem is the word utili- 
ty itself. Last I checked, most utility 
companies were still quasi-monopolies 
known for plodding, if generally reli- 
able, service. Despite recent attempts 
at deregulation, it would be hard to 
think of a less innovative and dynamic 
part of the U.S. economy. It’s telling 
that the broadcast business, which em- 
ploys a similar automated delivery 
model, never refers to itself in this 
way. Neither should the IT industry. 
Utility has all the wrong connotations. 

What we're really talking about is 
replacing the use of customer-man- 
aged hardware and software products 
with various third-party IT services 
delivered over a widely shared net- 
work, typically the Internet. 


But if you accept this def- 
inition, then it’s clear that 
many of us moved to the 
utility approach a long time 
ago. Certainly, most indi- 
viduals (as well as many 
businesses) who have their 
own Web sites prefer to 
rely on Web hosting ser- 
vices, where you pay per 
megabyte of storage, giga- 
byte of traffic, number of 
e-mail addresses and other 
usage-based metrics. 
There’s not much doubt 
that this style of computing will be- 
come increasingly important for an 
ever-wider range of applications. 

And yet IBM, HP, Sun and others 
that talk about the utility model rarely 
mention consumer/small business 
Web usage (probably because they 
don’t do a lot of business in the low 
end of the Web hosting market). In- 
stead, they typically focus on large 
corporations, using exotic phrases 
such as grid computing and data center 


author 


DAVID 
is an author and | 
pendent consultant. 
Contact him at 
dmoschella@earthiink net. 


virtualization. They do this 
even though they know 
perfectly well that large or- | 
ganizations will likely be 
the last segment to move 
wholeheartedly toward the 
services model. 

This disconnect between | 
the real market and the 
current supplier marketing 
focus seems likely to con- 
tinue. The reality is that 
the appeal of services- 
based computing is in- 
versely proportional to the 
difficulty of the task at hand. This 
means that complex and frequently 
changing business processes will be 
the hardest IT activities to put inside 
a remote black box. Although such 
work can always be outsourced, the 
necessary customization doesn’t go 
away. 

More fundamentally, the essence of 
the utility model is the provision of 
largely homogeneous services on a 
societywide basis. Whereas traditional | 


aaa) 


| utility-led industries have powerful 


economies of scale and are therefore 
often viewed as natural monopolies, 


the computer business doesn’t work 

| this way. Unlike software tools and ap- 
| plications, the scale economies of 
computing services are quite limited, 


with very low barriers to entry. This is 
why the Web hosting and Internet ser- 


| vice provider businesses remain so 
fragmented. 


Consequently, while some services 


| consolidation will no doubt occur, 


we'll probably never see a few compa- 


| nies dominate the online computing 

| business. In the end, this is why the 

| word utility is so misleading. The big 
| hardware suppliers might want you to 
| think that only they can provide the 

| powerful services infrastructure the 

| IT industry needs, but the market is 


already proving otherwise. D 
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Try Klingon 

RO PETRELEY rimarkas, en lia 

artikolo “Digital Rights and 
Wrongs,” ke la CableX specifo es- 
tos enla lingvo Esperanto. Tiuo- 
kaze, proksimume du milionoj da 
personoj tutmonde povos legi gxin. 
Misugestas, ke Mikrosoft ansta- 
taux aperigu gxin en Volapuk aux 
Klingono, aux eble VCR-Japana 

(Mr. Petreiey notes, in his article 

“Digital Rights and Wrongs” 
[QuickLink 34825], that the Cablex 


specification will be in the language | 
| Risk management consultant, 


Esperanto. In that case, about 
2 million people worldwide will be 


able to read it. | suggest that Micro- | 


soft instead should publish it in 
Volapuk or Klingon, or perhaps 
VCR-Japanese.) 

David Wolff 

Senior software engineer, 
Acton, Mass., 
cweo@dwolff.users.panix.com 


Get to the Root 


ECURITY MANAGER “Mathias 

Thurman” may feel he has 
reached endgame in locating his 
rogue AP, but he has addressed 
only a single outbreak and hasn't 
solved the cause of the problem 
[QuickLink 34509]. Someone ob- 
viously went to a bit of trouble to in- 
stall that AP and to then somewhat 





conceal its presence. What efforts 
were expended to determine who 
did this and why? Simply removing 
rogue APs without a follow-up 
won't resolve the problem. Policies 
and procedures must be estab- 
lished to address the rogue modifi- 
cation of the networks and to edu- 
cate the user community of the 
concerns such implementations 
raise. These policies need teeth, 
and there must be a consequence 
to recklessly or intentionally placing 
the corporation at risk. 

R.A. “Bob” Tremonti 


Dolomite Consulting, North 
Vancouver, British Columbia 


| Locking Up Servers 


HE FIREWALL IS NOT, and nev- 

er was, anything but a perime- 
ter safety net [QuickLink 34749]. 
Firewalls operate at Layers 3 and 4 


| of the OSI network model, and net- 


work attacks most often occur at 
Layer 7. As such, a firewall is de- 


| signed only to attempt to help re- 


inforce a secure environment by 
blocking types of network traffic 
that the servers definitely aren't 
hosting. Security must be built at 
the server. A properly secured net- 
work would, in fact, have no need 
for a firewall. One might even con- 
clude that by implementing a fire- 


wall, you are providing a false 

| sense of security. To put it in lay- 

| man’s terms, the firewall would be 
| like having a brick wall around a 
house. It doesn’t eliminate the need 
for the locks on the doors and win- 
dows, but only helps to deter the 

| entrance of those who haven't 

| been invited, assuming they are of 
good nature. To keep the bad peo- 
ple out, locks and alarms must still 
be installed 

Armand Welsh 

Information security officer, 

| State Street IMS West, 
Newport Beach, Calif. 
armand.welsh@sscims.com 


Security Standard 


HE DEC. 16 ARTICLE on 

Sprint's guidelines for vendors 
relating to the security of software 
products [QuickLink 35087] briefly 
| mentions a Department of Defense 
directive dealing with this same is- 
sue. This directive is the Common 
| Criteria (CC) certification for all new 
national security systems. However, 
CC is much more than a DOD direc- 
tive, as it is now recognized by 15 
nations, and more than 20 labs 
across the world can certify that 
products are CC-compliant. In other 
words, a global standard relating to 
computer security is emerging that 
can serve both government and 





| commercial enterprises. CC in the 


U.S. replaces the NSA’s old Orange 
Book program, which was fraught 
with problems and lacked interna- 
tional acceptance. Users want (and 
deserve) some type of guarantee 
that the software tools they use 
don't have any back doors and are 
produced and maintained to the 
highest standards. 

It's my belief that more compa- 
nies like Sprint will start demanding 


| that the security products they use 


have the CC certification. Can you 
imagine any major company not 
using UL-certified electrical prod- 
ucts? Why shouldn't software se- 
curity products undergo similar 
scrutiny? 


John Doyle 


| : 
| Sales director, 


STAT product line, Harris 
Corp., Melbourne, Fla. 


| COMPUTERWORLD welcomes 


comments from its readers. Letters 


| will be edited for brevity and clarity. 


They should be addressed to Letters, 
Computerworld, PO Box 9171, 500 
Old Connecticut Path, Framingham, 
Mass. 01701. Fax: (508) 879-4843. 
E-mail: letters@computerworld.com. 
Include an address and phone num- 
ber for immediate verification. 


More letters on these and other 
topics are on our Web site: 
computerworld.com/letters 
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ROBUST OBJECT DATABASE 


WIS 


pignergadctss sno made nneie 


Our post-relational database. 
New dimensions of scalability. 


For your next generation of applications, 
move to the next generation of database technology: 
Caché, the post-relational database. 

What makes Caché “post-relational”? It provides 
developers three integrated data access options which 
can be used simultaneously on the same data: an 
advanced object database, high-performance SQL, 
and rich multidimensional access. 

Because Caché’s architecture is a multi- 
dimensional structure, applications built on it are 
massively scalable and lightning-fast. 

Plus, no mapping is required between object, 
relational, and multidimensional views of data. 

This means huge savings in both development and 
processing time. And, Caché-based applications 
don’t require frequent database administration or 
hardware and middleware upgrades. 


More than just a database system, Caché 
incorporates a powerful Web application develop- 
ment environment that dramatically reduces the 
time to build and modify applications. 

The reliability of Caché is proven every day in 
“life-or-death” applications at hundreds of the largest 
hospitals. Caché is so reliable, it’s the world’s leading 
database in healthcare — and it powers enterprise 
applications in financial services, government and 
many other sectors. 

We are InterSystems, a specialist in database 
technology for 25 years. We provide 24x7 support 


to four million users in 
InterSystems » 


88 countries. Caché is 
available for Windows, ptt CACHE 
OpenVMS, Linux and LL i 


major UNIX platforms. Make Applications Faster 


Download a fully-functional version of Caché or request it on CD for free at www.InterSystems.com/post-relational 


2003 InterSystems Corporation. Al! rights reserved. InterSystems Caché is a registered trademark of interSystems Corporation. 
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CASE STUDY 


Dallas Answers the Call 

The city deploys an integrated call 
system to become more responsive 
to citizens and to track perfor- 
mance. Other municipalities and 
event-driven businesses may follow 





SECURITY MANAGER'S JOURNAL 


Spam Issue Viewed 

As IT Security Failure 

After a surge in spam puts Vince 
Tuesday on the defensive with 
users, a new service cleans up the 
problem and saves his reputation. 


FUTURE WATCH 


Pervasive Com enn 
Gets Organize 

For pervasive computing to reach its 
potential, numerous devices and systems 
will have to interoperate. Vince Stanford 
(left) is among those working on a needed | 


suit. Page 28 


data-flow standard at NIST. Page 32 


Page 36 





S CUSTOMER relation- 

ship management 

(CRM) technology has 

matured, users have 

begun looking for big- 

ger payoffs by enabling 
better integration with other enterprise 
applications. For instance, companies 
that want to let their customers view 
the status of their orders in real time 
might need to connect their call center 
or e-commerce applications to supply 
chain or manufacturing systems. 

“The notion that CRM is largely a 
stand-alone sales force automation 
function is no longer valid,” says 
Joshua Greenbaum, an analyst at En- 
terprise Applications Consulting in 
Daly City, Calif. “(Users] realize that 
CRM is central to many supply chain 
functions, such as order tracking and 





management, logistics and service.” 
But making those applications talk 


with one another isn’t easy. One way to 


solve this problem is to migrate to an 
integrated enterprise application inte- 
gration (EAI) suite from vendors such 
as SAP AG, Oracle Corp. or PeopleSoft 
Inc. These products have prebuilt inte- 
gration hooks that ease application- 
sharing headaches. They also include 
tool kits or adapters to hook the suite 
applications to other vendors’ mod- 

am By mney _— suite vendors’ — 


can cut integration costs inv solved with 
custom coding and consulting. But 
even if you’re willing to invest in such 
a migration effort, individual suite ap- 
plications might not always have the 
features you require. 

Users who go the best-of-breed 





Vendors are pushing both the 
use of enterprise suites and new 
integration tools as ways to mesh 
CRM with other enterprise 
applications. By Mare L. Songini 


CRM 
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Continued from page 23 

route and use applications from com- 
panies such as San Mateo, Calif.-based 
Siebel Systems Inc. can use built-in 
integration capabilities, says Erin 
Kinikin, an analyst at Cambridge, 
Mass.-based Giga Information Group 
Inc. For instance, Siebel is rolling out 
its Web services-based Universal Ap- 
plication Network framework to con- 
nect applications and allow business- 
process integration. 

Other CRM software vendors, in- 
cluding Menlo Park, Calif.-based Kana 
Software Inc., Cupertino, Calif.-based 
Chordiant Software Inc. and Cam- 
bridge, Mass.-based PegaSystems Inc., 
also offer products that enable integra- 
tion at the business-process level. 

“These vendors tend to do best at 
customer-facing or partner-facing ap- 
plications, where there’s lots of inte- 
gration required and processes change 
frequently,” Kinikin says. 


Suite Connections 
Ottawa-based Canada Post Corp. took 
the suite route after dealing with the 
aggravation of linking multiple appli- 
cations. “In the pre-Y2k world of our 
systems landscape, we had best-of- 
breed and custom-developed inter- 
faces tying it together, and it was a real 
mess,” says Aaron Nichols, general 
manager of business transformation at 
Canada Post. “It was tough to manage 
and hard to make changes.” 

Integrating disparate applications 
was possible, but it was complex and 
expensive because the software was 
passing information related to orders, 
pricing and contracts, he says. Because 
of this and the challenges of business- 
process re-engineering and change 
management in the organization, 
Canada Post decided to install SAP’s 
CRM and enterprise resource planning 
(ERP) modules. 

Using Web services, Canada Post has 
also connected its Web site to the SAP 
system so it can take orders and con- 
nect them directly to the ERP system. 
The mail carrier also built an interface 
to its legacy tracking software to let 
customers track parcel deliveries. 

When Canada Post went live with 
SAP CRM 2.0, the technology was im- 
mature, Nichols says. And there were 
many questions to sort out, such as 
whether the master customer profiles 
should reside in the CRM system or 
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the R/3 system. Nichols plans to move 
to Version 3.0, which he says is a more 
mature product with a broader range 
of CRM features. 

The CRM system has both prebuilt 
and homegrown interfaces. The con- 
nectors between the SAP CRM and 
R/3 applications that handle workflow 
came out of the box, but they required 
a bit of tuning. “We had to spend some 
time understanding them,” Nichols 
says. The connectors allow call center 
workers to access a customer’s case 
history from the back-end systems by 
entering a phone number. They also 
allow the system to route individual 
cases into the human resources system 
to determine whom to send them to 
for resolution. 

Canada Post’s order-taking system 
isn’t an SAP product, but it ties into the 
back-end R/3 software by way of eGate | 
EAI software from Monrovia, Calif.- 
based SeeBeyond Technology Corp. 

EGate handles all data going in and 
out of the SAP system. Nichols says 
business-process designers crafted 
each interface to select the requisite 
data that needed to be mapped and 
passed back and forth, and they devel- 
oped error-handling routines. Once the 
designs were finalized, they were giv- 
en to an integrator, who built, tested 
and deployed the architecture. 

Nichols says the integration project 
has resulted in a consolidated set of 
systems with tightly linked business 
processes and a common view for all 
customers. “We eliminated over 80 
legacy systems and reduced labor costs 
by eliminating duplication and waste 
in processes,” he says. 


Siebel in the Middle 


Suites may claim easier integration, 
but Jay Gardner, CIO at BMC Software 
Inc., says mixing and matching differ- 
ent CRM and ERP applications wasn’t 
a big deal. “There is definitely value to 
an integrated application, but I don’t 
think I have to have [all applications] 
from a single vendor,” he says. Al- 
though Gardner says he wouldn’t want 
to link together five different systems, 
two front- and back-office suites are 
manageable, he says. 

BMC recently connected its Siebel 
sales force automation system to its 
Oracle financials backbone to auto- 
mate order processing on the Web. 
The Houston-based maker of manage- 
ment applications has also connected a 
Siebel installation to its call system 
from Vantive Corp. (now part of Peo- 
pleSoft). The Siebel system also pulls 
information from a document manage- 





ment system, which allows support 


workers to view images of customer 
contracts. Information sharing among 
the Web team and the inside sales, di- 
rect sales and support staffs has gener- 
ated a faster turnaround on potential 
sales leads, Gardner says. 

BMC initially wrote its own custom 
interfaces for these applications but 
now plans to use EAI software from 
WebMethods Inc. in Fairfax, Va., to 
simplify future connectivity. The Web- 
Methods system, in pilot since June, 
provides more extensive coding capa- 
bilities than BMC’s legacy systems al- 
low, Gardner says. 

For instance, it enables a “publish 
and subscribe” model that lets BMC 
connect applications that need to share 
data with WebMethods without having 
to write separate point-to-point inter- 
faces for each one. BMC also plans to 
configure its Siebel application to gen- 
erate XML as its common CRM docu- 
ment format, so that the WebMethods 
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XML adapter can parse it. BMC will 
then use Web services to establish data 
synchronization between applications, 
Gardner says. 

Going forward, both suite and best- 
of-breed CRM vendors point to their 
support for Web services as the glue 
that will hold disparate systems to- 
gether. But, says Giga’s Kinikin, “the re- 
ality is that Web services is a five- to 
10-year evolution, not a magic answer. 
We're at the very beginning of a new 
journey.” 

And even after Web services are es- 
tablished, she says, IT will still need to 
incorporate process flows, metadata 
and semantics-based standards such as 
electronic data interchange. D 


MERGING ERP WITH CRM 


Developers were the key to a successful integration 
project at InterLink: 


QuickLink 34342 
www.computerworld.com 








Your Enterprise Monday 10:32 A.M 


Now you can know 
what, when, where 
and how data change 
has occurred. 


Tripwire® assures the integrity of your data 
and gives you the ability to effectively pinpoint 
and manage undesired change across all your 
servers and network devices. By establishing 
a baseline of data in its known good state, 
Tripwire software monitors and reports any 
changes to that baseline and enables rapid 
discovery and recovery when an undesired 
change occurs 


Maximize System Uptime 

® Identify change quickly 

™@ Enable quick restoration to a desired state 
@ Eliminate risk and uncertainty 


Failsafe Foundation for Data Security 
@ Ensure the integrity of your data 

@ Enable detailed audit reporting 

@ Granular visibility and control 


Lower Costs and Frustration 
@ Greatly reduces the time it takes to 
find and diagnose problems 


© Copyright 2003. Tripwire and the Tripwire logo are registered trademarks of Tripwire, Inc 


Tripwire’s data integrity assurance solutions 
are the only way to have 100% confidence 
that your systems remain uncompromised 

In the event of a change in state, you'll know 
exacfly what, when, where and how change 
has occurred so you can recover quickly 


For a FREE 30-day fully-functional demo 
and copy of the white paper “Data Integrity 
Assurance in a Layered Security Strategy...”, 
call toll-free: 1-800-TRIPWIRE (874.7947) 
or visit http://enterprise.tripwire.com today! 
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Your needs. 


Your choice. 


It’s high time someone in the software industry started listening to your needs. And standing up for your rights. Like the right to have 
month-to-month licensing. And the right to no upfront payments. That’s why we offer FlexSelect Licensing™ to all our customers. This 
revolutionary approach to licensing is based on doing business on your terms, not ours. So you can have just the software you need, 
just when you need it. Check it out today. And find out how FlexSelect Licensing is raising more than just eyebrows in the software 
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Introducing FlexSelect Licensing ta) Computer Associates® 


© 2003 Computer Associates international, inc. (CA). All rights reserved. 





28 compurerworto Jancary 13, 203 
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NE YEAR AGO, on Jan. 13, 2002, the Dallas 

municipal IT department flipped the 

switch on a $5 million automated citizen- 

request management system. 

From that moment on, city residents 

could make their 1.1 million annual calls 
for city services to one number, 311. And through that 
number, they could do everything from finding out 
when a pothole wouid be repaired to reporting a 


| missed trash pickup to checking on a water bill. 


In what is becoming a model for other municipali- 


| ties and event-driven businesses, the Dallas system 


automatically routes requests to the appropriate de- 


| partments and tracks them to ensure that service- 


level agreements are met. It runs on a central Oracle 
Parallel Server (OPS) and a centralized requests 
database, but each city department controls access 


| to its own data and applications. 


The system was in the planning stage for two years 
but went live after a scant six months for installation 


| and testing. It was an immediate success, and the 
| mood in the Dallas data center after the launch last 


January was exultant, says Dan McFarland, the city’s 
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CIO. A week later, however, things didn’t look so 


| ‘ e 
rosy. An ongoing disaster recovery test, begun the 


week before the system went live, had crashed one of 


| the system’s two redundant servers from Suncoast 


Scientific Inc., a Motorola Inc. company in Shalimar, 
Fla. “It was abysmal,” Jon Bigelow, the city’s 311 proj- 


ect coordinator, says of the test. “How do you know 


you've got a good backup? Unless you test it, you 


| don’t know.” 


Although most glitches were minor and fixed by 
the end of January, the cause of the crash wasn’t dis- 
covered for another month. “Installation settings 
from the backups were wrong,” says Bigelow. With 
the settings corrected, backups worked properly, 
which cleared the roadblock standing in the way 
of disaster recovery. 

But then software snags began to arise. As the first 
user to run Motorola’s Customer Service Request 
(CSR) system on Oracle Corp.’s OPS, “we had some 
issues,” Bigelow says. For example, application re- 
sponse time was “horrendous,” he says. It should 
have been near instantaneous but instead took from 
minutes to an hour for one city department. Further- 
more, the system required a complete reboot every 
36 hours to keep it from slowing to a halt. 

It wasn’t until mid-March that the source of the 
slowdown was identified. “The Oracle people were 


| instructing our people, and the Motorola DBA was 


watching and said, ‘Something’s not right here. That 
parameter is set wrong,’ ” says Bigelow. 

Correcting that setting not only alleviated most of 
the response time lag, but it also allowed the removal 

of diagnostic software that had been us- 
ing needed resources, he says. 

By late summer, all major city de- 
partments except for the water de- 
partment were on the 3ll system. The 
water department was still testing an 
interface between the customer rela- 
tionship management system and its 
billing systems and evaluating 

whether requests involved too much 
data outside the scope of CSR, Bigelow says. 

Good backups were running without incident. 

Some geodata errors were still occurring with 
about 10% of the information about streets, but that 
shouldn’t be a problem after the next release of CSR, 
Bigelow says. That version will interface with the 

city’s geographic information system (GIS), 
which is based on GIS software from Envi- 
ronmental Systems Research Institute 
(ESRD in Redlands, Calif. 

Support from Motorola has been good, but the 
geodata errors reveal a drawback to the package soft- 
ware, he says. “It’s proprietary software. If you need 
to make a change, you have to go to Motorola. While 
users can correct their geodata, no audit trail was in- 
corporated into this portion of the product, so you 
can’t track changes. We would like to change that, 
but the change has to come from Motorola. We’re 
chomping at the bit for the ESRI interface,” Bigelow 
says. “On the upside, we seem to be contributing to 
the road map for this product. A lot of what the de- 
partments have asked for has been implemented in 
the product.” 

When McFarland first came to Dallas in April 1999 
and envisioned this clockwork system, the city faced 
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In Dallas’ new 311 system, a citizen's complaint is automatically logged in a centralized database and sent to the appropriate departments for 
action, dictated by service-level agreements (SLA) the city has negotiated. The citizen can call or go online to track the progress ofthe complaint. | 


Tracking a 


formidable hurdles. City databases and systems were 
splintered onto multiple applications and platforms, 
including some applications running under a home- 
grown mainframe operating system. Groundwork in- 
cluded converting to OS/390; consolidating the city’s 
tax, court, building inspection and GIS databases 
onto an Oracle database; and standardizing 520 re- 
quest processes from departments citywide. 

The CSR project kicked off in July 2001. By No- 
vember, the city had built three servers, installed 
virus protection and created an installation disk that 
would work across all platforms. 

In December 2001, Dallas added two more servers 
to handle the Web interface. These would be joined 
in January by three more servers to handle the mo- 
bile application interface and one more in 
March to handle reporting. Also in De- 
cember, the deployment team rolled out 
the system to 825 Windows NT, 98 and 
2000 desktops. It was ready for testing 
Jan. 2, 2002. 

Throughout the CSR project's life cycle, 


“we've kept in mind that this isn’t IT’s project; it’s the 


user departments’ project,” Bigelow says. With more 
than 500 business processes that had to be re-engi- 
neered before the city could complete the project, 
success was predicated on getting buy-in, he says. 


As ultimately successful as the implementation has | 


been, Bigelow says he wishes some of the timing had 
been different. “Motorola had elected to have the 
city’s configuration managers begin setting up the 
service requests before training them in how the 
base product worked,” he says. When they did get 
training, they had to rework configurations to take 
advantage of what they had learned. 

“The first full 90% of problems with the system 
were training issues,” he acknowledges. There just 
wasn’t enough time between training and implemen- 


Tickets 


Data center 


tation for users to practice, Bigelow says. 
The city worked with Motorola for several months 


| to get a viable installation package. The final version 


wasn’t available until almost November 2001, and 
even then it had a conflict — fixed two months later 
— with the Windows 2000 platform, he says. 

The geodata caused another lag: The Motorola 
conversion to the street data wasn’t complete until 


| the week of implementation. And Bigelow says the 
| disaster recovery testing should have occurred much 
| earlier than the week before implementation. 


BEYOND DALLAS — 


Learn how other cities are 
revamping their call centers 
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A Year Later 

A year after Dallas’ 311 system went live, it’s still 
evolving, says McFarland. The anxiously awaited 
ESRI interface between the city’s GIS and 
311 systems has been deployed, virtually 
eliminating geodata errors. 

“Of the 1.1 million 311 calls the city 
fields annually, about 300,000 are being 
offloaded onto the interactive voice re- 
sponse system,” McFarland says. Citizens 
find the new system easier to deal with, he says. Re- 
quests for service now go directly to those responsi- 


| ble for the service, shortening response times and 


allowing managers to better allocate resources. 

“The key to the success of any 311 system is how 
fast you can clear up those troubles. Otherwise, it’s 
just a sophisticated record-keeper,” says McFarland. 

The IT department is now installing wireless LAN 
access points that will let city workers in the field 
download code-compliance data. 

And the 311 project has provided plenty of lessons 
for the city’s next project — an integrated, citywide 
enterprise resource management system. D 


| Lais isa Computerworld contributing writer in 


Takoma Park, Md. 





oft Call 


Dallas’ new citizen-request management 
system integrates requests to 520 city 
services processes and lets the city and 
residents track each request. 

Dan McFarland, CIO for the city, explains 
how it works 

A citizen needs a service - a pothole re- 
paired, for example. She calls 311 to complain 

The call-taker brings up the application 
and enters location and description information 
on the pothole. 

A geographic information system assigns 
11 layers of geodata, such as the street number 
and the location of the pothole, and that data is 
stored with the application in the database. 

Differentiation is made between a nui- 
sance pothole and one that presents a safety 
hazard. Notification goes to the Department of 
Streets Services and to the department's field 
supervisor via two-way pager, which syncs 
with the central data center database every 
half-hour. 

If the pothole is a safety hazard and the 
street needs to be closed for repairs, the call- 
taker can tell the caller about the closing and 
notify the field supervisor via radio dispatch 

The system automatically notifies depart- 
ments that will be affected; sanitation, for ex- 
ample, might have to reroute trash pickups 

The city has service-level agreements 
(SLA) for when repairs will be done, and the 
new system enables the call-taker to tell the 
caller when the pothole is likely to be fixed. If 
the pothoie isn’t filled in time, the system esca- 
lates the report, notifying management that an 
SLA has been violated. 

The new 311 system, which is integrated city- 
wide and runs on a centralized server, stores 
information about the pothole in a centralized 
database, which each city office can access 

One of the advantages of the system is that 
it tracks citizens’ calls centrally, eliminating re- 
dundancies. For example, McFarland says, if 
someone else had called with a question about, 
say, a water bill and at the end of the call had 
said he also wanted to report a pothole that 
needed to be filled, the system would recognize 
whether this caller's pothole was the same as 
the one the other caller reported 

With the old system, a second request for 
the same pothole would be initiated, with no 
way to tie it to the first request and no way to 
track the complaints. 

- Sami Lais 
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Net Terminal 
Services Drive 
Rental System 


Enterprise Rent-A-Car’s thin-client project 
will be one of the biggest ever Se using 
Microsoft’s .Net Terminal Services. 6 i Sliwe 


NTERPRISE RENT-A-CAR CO. is 

venturing where few, if any, 

companies have gone before. 

The St. Louis-based firm plans 

to deliver Microsoft Office and inter- 
nally developed car-rental applications 
to 5,000 branch locations equipped 
with Windows CE-based terminals. 
Those thin-client devices will access 
the applications through the enhanced 
Terminal Services features in Micro- 
soft Corp.’s upcoming release of Win- 
dows .Net Server 2003. 

For more than 10 years, branch em- 
ployees have rented out cars using 
5250 terminals that link back to the 
company’s AS/400 servers in St. Louis. 
But Enterprise wants to replace the 
limited-function green screens with a 
more graphical interface and give its 
users a more PC-like environment that 
will support new features and capabili- 
ties, says Mark Adams, an assistant 
vice president of information systems 
at the company. 

Adams says that Enterprise also 
wants to retain its existing support 
model for its 5250 terminals because it 
knows well the effort required to sup- 
port full-blown PCs. Enterprise settled 
on Windows CE-based thin clients be- 
cause it found them easier to manage 
and configure and considered them 
more consistent across vendor lines 
than Unix- and Linux-based devices, 
says Derik Reiser, director of platform 
solutions at the company. 

The Windows CE terminals launch 
Microsoft Remote Desktop Protocol 
(RDP) 5.1 client software and establish 
sessions either through a LAN toa 
server in the branch office or through 
a shared frame-relay circuit to servers 
at Enterprise’s headquarters. 

As part of Microsoft’s Joint Devel- 


| 
| 


| 
| 
| 
| 


| 
| 
| 
| 





opment Program, Enterprise has been 
testing Terminal Services at 18 branches 
that have two-processor servers run- 
ning locally and at two branches that 
connect to four-way boxes in St. Louis. 
But the ultimate scope of the proj- 


| ect is far more ambitious. During the 


next 24 months, Enterprise plans to 


| roll out Windows .Net Server 2003 to 


2,500 of its larger branches and con- 


| nect the remaining 2,500 to central 
| servers in St. Louis. 


The sheer scale will set the Enter- 
prise project apart from the typical 


| Microsoft Terminal Services deploy- 





ment, according to Mark Margevicius, 
an analyst at Stamford, Conn.-based 
Gartner Inc. He says that 250 to 300 
clients has been the “magic number” 
for Terminal Services. Beyond that, 
most companies have gone to a more 
scalable product, such as MetaFrame 
XP from Citrix Systems Inc. 

David Friedlander, an analyst at Giga 
Information Group Inc., says that even 
though the Windows .Net version of 
Terminal Server is improved, he still 
doesn’t expect many companies the 
size of Enterprise to deploy only the 
Microsoft product. He says others will 
likely turn to MetaFrame because of its 


| support for a wider range of clients, 


advanced manageability and security 
features for remote access. 

Enterprise considered MetaFrame 
as well as several open-source options, 
but for the lighter needs of its branches, 
it found the Microsoft Terminal Serv- 
ices approach sufficient, Adams says. 

“We believed that running fewer 
products would make the solution less 


| complicated to support over the long 


haul,” he says. “With the Windows .Net 
Terminal Services combination, we 
had fewer pieces and parts to manage.” 
Plus, .Net Server offers enhance- 
ments that Enterprise has found useful. 
For instance, the new group policy 
management console lets the company 
apply policies to a collection of servers. 
When Enterprise adds a server to the 
group, the server will inherit the same 


ENTERPRISE RENT-A-CAR is upgrading 5,000 offices from text-mode terminals to Windows CE 
terminals running .Net Terminal Services. The headquarters Terminal Server farm will support 2,500 
branch locations directly and provide fail-over support for another 2,500 larger branches, which will 


have their own Terminal Server host. 
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configuration settings as each of the 
others in the group, Reiser says. 

Policies also can be applied to each 
user’s account at log-on to indicate 
which data, directories and drives the 
user can access, he says. 

Reiser says he also likes the new ses- 
sion-directory feature, which tracks 
user connections to specific servers. If 
a user is disconnected, he is pointed 
back to the server where the session 
originated. In the past, he might have 
reconnected to a different server, pos- 
sibly losing work, Reiser says. 


The MetaFrame Alternative 
Citrix’s MetaFrame has many capabil- 
ities that aren’t found in Windows 
.Net Server, such as built-in load bal- 
ancing, which directs users to the 
least busy server. 

And Enterprise is familiar with the 
benefits that third-party products can 
add to a Windows Terminal Services 
deployment, because it has delivered 
enterprise resource planning applica- 
tions to administrative offices using 
MetaFrame, Adams notes. But he says 
Enterprise won't need Citrix’s ad- 
vanced management console, since it 
won't be running a complex set of ap- 
plications on its server farm. “Most of 
our applications will be delivered with 
browser-type technology,” he says. 

Support for heterogeneous clients 
isn’t necessary because Enterprise 
plans to use only Windows clients. 
And because the clients will connect 
via a private network, the Terminal 
Server product won’t be relied upon to 
provide security, Reiser says. 

MetaFrame also helps companies 
that need to do complex application 


| publishing, Reiser says. But since En- 


terprise is publishing an entire desktop 
to its Windows CE devices, which run 
only the Windows CE operating sys- 
tem and the RDP 5.1 client, those fea- 
tures aren’t critical. 

“In an ali-Microsoft environment, 
with Microsoft clients and servers and 
no intention of supporting anything 
else, the Microsoft [Terminal Services] 
approach is certainly a reasonable one 
to take,” says Dan Kusnetzky, an ana- 
lyst at Framingham, Mass.-based IDC. 

But even in an all-Microsoft environ- 
ment, there’s a need for considerable 


| advance planning. Enterprise, for in- 


stance, had to roll out Active Directory 
in conjunction with the Terminal Ser- 
vices project. 

“Don’t underestimate the amount of 
time and effort you need to put into 
how this component intertwines with 
the other portions of your architec- 
ture,” Adams says. D 
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Pervasive Co 
Gets Organized 


Beyond the 20th century: Standards emerge for sharing data across 
heterogeneous computers and input devices. By Patrick Thibodeau 


ORGET MOORE'S LAW. The reality 

is that workstations haven’t 

changed all that much in 30 

years, despite their enormous 
power and performance gains. Inter- 
facing is still a matter of pressing plas- 
tic keys and clicking on a mouse. 

But imagine, as Vince Stanford does, 
a time when a camera-equipped PC will | 
be able to follow your gaze and shift | 
applications with your focus. Imagine 
also that the camera and microphone 
arrays in conference rooms will recog- 
nize you, watch you, listen to you, infer 
what you want and produce the infor- 
mation that you need, sans keyboard. 

“How do we get beyond this 20th 
century model?” asks Stanford, in his 
pervasive computing lab at the Nation- 
al Institute of Standards and Technolo- 
gy’s (NIST) sprawling campus in 
Gaithersburg, Md. The computer sci- 
entist is creating standards that will 
enable computers and people to inter- 
act, no matter where they are. 

Pervasive computing utilizes “multi- 
modal” interfaces, and that means de- 
veloping systems that can recognize 
voice and gestures — systems that per- 
ceive their end users. The PC remains 
important in a pervasive system, and 
the technology could involve new ways 
of interfacing with a desktop, such as 
gaze-tracking. 

But instead of inputting commands 
in front of one PC exclusively, a 
pervasive system extends the 
idea of interfacing to tens or 
hundreds of devices. It will no 
longer matter whether end 
users are in front of their PCs; 
their connection to information will be 
available from any device or location. | 
It’s a philosophical as well as a techno- 
logical change. 

“You need to shift the focus from 
one machine, one interface, to one per- | 
son and one interface made up of many 
computers,” says Stanford. 

But there are problems. Although 
PCs may be “plug and play,” pervasive 
systems are not — yet. Interconnecting 
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VINCE STANFORD is a computer scientist in the pervasive computing laboratory at the National 
Institute of Standards and Technology, which is connecting cameras, microphones and other sen- 
sors to create pervasive devices. The flow chart behind him illustrates some of that work. 


a wide variety of technologies that can 
be mobile or wearable, embedded or 
stationary, all performing a wide range 
of functions, can’t be accomplished 
without standards. 

IST is at work on an open-source, 
pervasive computing standard called 
Smart Flow to address the underlying 
problem of connecting a vari- 
ety of devices, systems and 
sensors that make up a multi- 
modal environment. This stan- 
dard is intended to let a com- 
pany that makes a video, voice 
or location sensor, for instance, send 
data from that device in a standard for- 
mat that could be accessed by an ana- 
lyzer from another company. 

NIST has formed the Pervasive 
Computing Standards Working Group 
and has begun recruiting vendors to 
join the effort. Initially, the focus will 
be on getting technology companies to 
join, but business end users will also 
be asked to participate. “We also try to 





have companies that are large-scale 
consumers of the technologies,” Stan- 
ford says. Creating this standard will 
be a multiyear project, he notes, partly 
because the technologies are still 
emerging. 

Stanford says there are a lot of “little 
pieces” of pervasive computing tech- 
nology “that can’t play together” be- 
cause of this lack of standards. “We 
think there is tremendous leverage to 
be had in these so-called sensor fu- 
sions and combinations of different ca- 
pabilities,” he says. 

As its name implies, NIST seeks out 
technologies in need of standards 
work. NIST sees itself as a neutral 
third party “that has the broader 
public good in mind,” says Stanford, 
and its goal is that “all companies 
should become more capable.” 

For example, NIST is leading an ef- 
fort to analyze the Bluetooth wireless 
protocol so it can interoperate better 
with 802.11 wireless Ethernet. Bluetooth 
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shares its part of the radio spectrum 
(2.45 GHz) with 802.11, but the two in- 
terfere with each other’s signals in that 
spectrum. Both protocols are consid- 
ered critical to pervasive computing. 

NIST also develops reference data for 
testing products. For instance, its 
speech-recognition reference data al- 
lows vendors to compare the accuracy 
of their voice recognition software 
against a neutral benchmark. The 
benchmarks consist of annotated voice 
recordings of varying levels of difficulty. 

Vendors agree that NIST has a role 
to play in developing standards. “Be- 
cause there are no standards, everyone 
has to set up their own protocols,” says 
Alex Malison, the CEO of Action Sys- 
tems Inc., a Silver Spring, Md.-based 
maker of wireless systems for restau- 
rants. “There is no coherent way for 
everyone to know what to expect when 
they are learning something new.” 


Read My Lips 


The practical applications of pervasive 
systems vary. NIST has set up an array 
of microphones and cameras that can 
keep track of what’s occurring in a con- 
ference room. With sophisticated lip- 
reading, gaze-tracking and speech- 
recognition systems, the time may soon 
come when meeting minutes are auto- 
matically recorded and digitized, and 
participants can issue commands di- 
rectly to employees from the meeting. 

Pervasive systems depend on a lot of 
technology coming together. For exam- 
ple, Foveal Systems LLC in Madison, 
N,J., makes automated camera systems 
that can make videos by sensing the 
presence of a speaker and the visual 
aids he’s using. Foveal ’s owner, 
Michael Bianchi, say he needs micro- 
phone arrays that can look at a 50-seat 
classroom and figure out the location 
of a person asking a question. Develop- 
ing that microphone array and inte- 
grating it with Foveal’s camera system 
will take standards, he says. 

Stanford says NIST decided to focus 
on the issue of integration in a perva- 
sive environment because the private 
sector wasn’t doing it. If vendors “can 
come together and create and find new 
business opportunities because they 
have this ability to interact,” he says 
“then we would say we have succeeded, 
and we would be happy for a few 
months and then start something else.” D 
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Spam Issue Viewed 
As IT Security Failure 


A surge in e-mail spam undermines user 
confidence in an otherwise solid security 
infrastructure. By Vince Tuesday 


HE PROBLEM of unwant- 
ed e-mails may not be 
the biggest security 
threat my company 
faces, but it’s a highly visible 
failure to our employees and 
threatens to taint the IT secu- 
rity group’s good reputation. 
One of the ways that staffers 
judge good security is if they 
can work free of fear. We 
score pretty well on 
that measure. Our 
managers don’t fear 
that our business sys- 
tems will be compro- 
mised or corrupted, 
our desktop users no 


a ae ees 
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our e-mail systems were 

spending time on spam rather 
than on customer e-mails, and 
the problem affected employ- 


| ees at all levels. 


| Turning to Blacklists 


The first option we looked at 


| was using a blacklist service, 
| which takes spam reports, 


identifies the servers used and 
publishes the ad- 
dresses so that our 
e-mail server can 
automatically shun 
further e-mails from 
those sources. But 
spammers move to 


longer fear virus in- 

fections, and I generally don’t 
fear large security incidents 
looming on the horizon. Life is 
good. Apart from spam, that is. | 

Because many of our staffers 
work with customers, they of- 
ten publish their e-mail ad- 
dresses on our Web site and in 
our publications. These staffers 
get flooded with hundreds of 
rubbish messages along with 
real customer e-mails. 

They get offered radio-con- 
trolled cars, free money from 
Nigeria and, perhaps most 
bizarrely, septic tanks. That 
flood is bad enough, but mixed 
in with all the commercial 
rubbish are darker-themed 
messages — come-ons to 
pornographic Web sites and 
hate sites, as well as abusive 
e-mails. 

These frontline staffers con- 
stantly face high volumes of 
offensive content, and until 
recently, we had done little 
about it. 

The problem became bad 
enough that it presented a risk 
to our productivity. Staffers 
were worried by the content, 


new servers faster 
than the blacklist can keep up. 
Another drawback: Once a 
company is on the blacklist, 
its e-mail administrator must 
jump through hoops to get 
it removed. Meanwhile, any 
legitimate e-mail from that 
company is blocked. Blacklists 
are useful and have made a 
dent in spam volumes, but 
this tool alone wasn’t good 


enough for us. 


We ended up going with a 
more elaborate service from 


| MessageLabs Ltd., a Minne- 


Once a company is 
on the blacklist, its 
e-mail administrator 
must jump through 
hoops to get it re- 
moved. Meanwhile, 
any legitimate e-mail 
is blocked. 





| apolis-based service provider 
we were already using for 
e-mail traffic virus scans. The 
company offers a service to la- 
bel spam using both blacklists 
and heuristics. As far as I can 
tell, this means MessageLabs 
has found a set of features as- 
sociated with spam, produced 
a weighting for those features 
and established a threshold 
above which something is 
marked as probable spam. 

For example, if an e-mail 
says, “Make money fast,” then 
it will get a high score as pos- 
sible spam. But if it comes 
from a known mailing list, the 
score will drop. 

After testing the service, we 
found that it was marking 40% 
of all inbound e-mail as spam 
— more than 10,000 messages 


| per day. After a month, just 


106 e-mails had been incor- 
rectly flagged — a false-alarm 
rate of less than 0.04%. That 
was good enough for us, espe- 
cially since we can tune the 
rules so that such messages 
will be delivered the next time. 
We later discovered that 


| many of the falsely tagged 


e-mails were what I would call 


| spam, but they happened to 


advertise products in which 
the recipient had an interest. 
This built our confidence in 


| the service even more. 


Some spam still gets 


| through, but the amount is rel- 


| atively small, 


and the sources 


| are blocked when reported. 


And our users don’t have to 
do anything to benefit from 


| the service. 


Not to be cynical, but I won- 


| der, How long will it take for 


users to start thinking that 


| even the greatly reduced level 


| of spam is too much and come 


back asking for further im- 


| provements? 


Spam is also a problem out- 
side the office. My personal 
e-mail address is widely pub- 


| lished, thanks to this column, 
so I get on many lists as well. 
The Web e-mail company I 
use, Dublin-based Hush Com- 
munications Inc., recently 
launched a new service called 
the Human Authenticator. 
When readers send me an 
e-mail message, I don’t receive 
it until the sender performs a 
simple task that only a human 
could do. If you are a spammer, 
you won't have the time to car- 
ry out this task, so I hope that 
only individuals will be able to 
send mail to that account from 
now on. I'll have to see how it 
works out — and how readers 

| react to the request. 


| Hoop Games 
| Even if the Human Authenti- 
cator works, I have concerns 
about forcing people who 
want to communicate with me 
to jump through hoops. And 
spammers, who make good 
money for their efforts, can 
well afford to get around 
such mechanisms by finding 
new ways to distribute com- 
mercial messages to potential 
| customers. 
I’ve already seen operating 
| system message windows pop- 
ping up on cable and Digital 
| Subscriber Line clients with 
| spam text in them. I’ve also 
| seen Windows Media files 
that halfway through loading 
start opening Web sites to dis- 
| play commercial messages. Is 
| this the way spammers will go 
| if control of e-mail spam final- 
ly starts to work? D 


| WHAT DO YOU THINK? 


This week's journal is written by a real 
security manager, “Vince Tuesday,” whose 
name and employer have been disguised 
| for obvious reasons. Contact him at vince 
| tuesday@hushmail.com, or join the dis- 
cussion in our forum 


Q ickLink a1590 





| 
To find a complete archive of our 

| Security Manager's Journals, go online to 
| €¥ computerworld.com/secjournal 
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Security Bookshelf 


& The Artof 
Deception, by 
Kevin Mitnick 
and William L. 
Simon; John 
Wiley & Sons, 
2002. 
Mitnick, once 
the world’s 
most reviled hacker, has co- 
written this book to teach 
companies how to defend 
against the threat of social 
engineering attacks. 

Although the author in- 
cludes best defenses against 
these threats, his recommen- 
dations offer fairly weak pro- 
tection against social! engi- 
neering. Nonetheless, | found 
The Art of Deceptionto be a 
superb primer. 

~ Vince Tuesday 


NAI Adds 
Spam Control 
Network security vendor Net- 
work Associates Inc. (NAI) 
beefed up its antispam prod- 
ucts by acquiring Palo Alto, 
Calif.-based Deersoft Inc. NAI 
will use Deersoft’s Spam- 
Assassin Pro and Enterprise 
editions as the basis for its up- 
coming antispam products. 
Santa Clara, Calif.-based 
NAI will deliver McAfee 
SpamKiller Enterprise for 
desktops early in the second 
quarter, and the company will 
update its ePolicy Orchestra- 
tor to manage SpamKiller 
Enterprise. 


Sourcefire 

Ships Sensors 
intrusion-detection systems 
(IDS) vendor Sourcefire Inc. in 
Columbia, Md., this month be- 
gins shipping two IDS network 
sensors for use in businesses 
that don’t require gigabit- 
speed intrusion detection. The 
Sourcefire Network Sensor 
1000 appliance, which sup- 
ports up to 30M bit/sec. 
speeds, costs $5,000. The 
Network Sensor 2100, which 
operates between 250M to 
300M bit/sec., costs $13,000. 
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LANDesk Updates 
Management Suite 


LANDesk Software Inc. in Salt 
Lake City today will announce a 
version of its Management Suite 
product that provides operating 
system deployment functionality. 
The new version provides patent- 
ed multicasting technology for 
distributing operating systems to 
new clients or for updating older 
ones. Pricing is $75 per node, the 
company said. 


Microsoft Releases | 
Security Package 
For Servers 


Microsoft Corp. last week re- 
leased Feature Pack 1 for its In- 
ternet Security and Acceleration 
(ISA) Server 2000. The feature 
pack includes new application- 
layer firewall defenses and secu- 
rity enhancements for Exchange 
Server and Internet Information 
Server, as well as support for 
RSA Security Inc.’s SecurlD two- 
factor authentication product. ISA 
Server Feature Pack 1 can be 
downloaded at Microsoft's Web 
site at www.microsoft.com/ 
isaserver/featurepack1/. 


OASIS Launches 
PKi Initiative 


The Organization for the Ad- 
vancement of Structured Infor- 
mation Standards (OASIS) an- 
nounced last week the formation 
of a new technical committee to 
promote adoption of public-key 
infrastructure (PKI) technology 
for Web services and other appli- 
cations. The Billerica, Mass.- 
based group plans to put out 
white papers, implementation 
guidelines and conformance 
tests to increase awareness and 
use of digital certificates. Terry 
Leahy, a vice president at Wells 
Fargo & Co., is chairman of the 
new committee. Vendor support- 
ers include Baltimore Technolo- 
gies PLC, Computer Associates 
International Inc., Entrust Inc., 
Neucom Corp., RSA Security, 
Sun Microsystems Inc. and 
VeriSign Inc. 
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Digital Rights 
Dominate 2002 Awards 


IVEN THE YEAR’S EVENTS, it should 
come as no surprise that digital rights 
dominate my 2002 “You Can’t Be 

Serious” awards. These annual awards 


in IT double-think. 


In that spirit, the “Beverage Through the Nose” 
award for 2002 goes to Congressman Howard Berman. 

Be sure not to indulge in any liquid refreshment 
while reading Berman’s statements about peer-to-peer 
networking published at www.house.gov/berman. In 
one amusing argument, he suggests that companies 


should be held blameless 
for breaking into your net- 
work to search for copy- 
righted content. It seems 
he came up with this theo- 
ry because people are al- 
ready given the leeway to 
trespass on someone’s lawn 
to retrieve a stolen bicycle 
that’s in plain view. To be 
sure, Richard Nixon’s infa- 
mous Checkers speech 

was more inspired, but 
Berman’s works of lunatic 
reasoning show great promise. 

Microsoft ranked a close second in 
this category, but I have no pity for 
the poor fool with a mouthful of gin- 
ger ale when he heard Bill Gates first 
utter the words Trustworthy Comput- 
ing last January. After hearing terms 
like Zero Administration Windows, 
everyone should know by now that 
it’s dangerous to drink anything car- 
bonated during an announcement 
from Redmond. 

Nevertheless, Microsoft does run 
away with three major awards this 
year. The first is the “Information at 
Your Fingertips” award. How many 
times has this happened to you? 
You're at a company party shooting 
the breeze with your boss about the 





clever plot of a DVD 
movie you rented and 
watched yesterday. But 
when she asks about the 
name of the movie, your 
mind goes blank. Until re- 
cently, you’d have to wait 
until 3 a.m. for the name to 
come back to you. 

Now the information can 
be as close as your cell 
phone. Every time you use 


players from accessing DRM-enabled 
content. 
As DRM, or digital rights manage- 


| ment, gains momentum and all your 


| other software stops working, Win- 
| dows Media Player is sure to become 


recognize truly astonishing achievements | 


the irresistible choice for all your en- 


tertainment needs. 


This ability to assert remote control 
over your software earns the company 
the “Zero Degrees of Separation” 
award for 2002. Granted, you could 


| miss out on features like this if you 


don’t have a PC, but it’s safe to assume 


| that Microsoft has similar plans for the 


Xbox and that companies such as Dis- 
ney and Sony are hard at work figuring 
out how to control your access to copy- 


| righted media on standard players. Bet- 


ter watch out, Microsoft, or one of these 


| other companies could nudge you out 
| of first place in this category next year! 


The third award for Microsoft is the 


| coveted “Ignorance Is Bliss” prize for 


2002. The fact that sane people still 
use Windows or Media Player testi- 
fies to how well the company has 


| been able to protect its customers 


the Windows Media Player | 


to watch a new DVD, it 
automatically identifies the DVD to a 


| Microsoft server, along with a unique 


identifier for your personal player. 
So the next time you're on the spot 


| for the name of some DVD you 


watched, give Microsoft a jingle and 


| ask. Someone at the company should 


know the answer. 

Naturally, this convenience will be 
unavailable to you if you don’t use 
Windows Media Player. Fortunately, 


Microsoft devised an ingenious pian to | 


prevent you from accidentally using 


| less capable alternatives. 


Here’s how it works: Along with au- 
tomatic updates to software and your 


| end-user agreement, Windows XP pe- 


riodically downloads the information 
it needs to prevent unapproved media 


from information about what these 
products are doing without their in- 
formed consent. 

Finally, Ximian Inc. walks away with 


“The Mouse That Squeaked” award 
| for continuing to reproduce the .Net 
| development framework as an open- 





source project called Mono. The value 
of Mono eludes me, but perhaps 
there’s a secret contingent of open- 


| source programmers itching to write 
| code in Visual Basic .Net. 


Nevertheless, only delusions of 
grandeur could account for the notion 
that Microsoft won’t bankrupt Ximian 
and stop the project on claims of 


| patent violations the moment Mono 
| poses a threat. D 
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When to Leave Your 

Calculator in the Drawer 

Not all IT investments require ROI and 
other financial modeling upfront. Some- 
times managerial experience and know- 


§? 





QUOTE OF THE WEEK 

& Knowledge transfer in the long run isn’t 
going to help consultants get more busi- 

ness. So, make sure it’s in the contract upfront 

as one of the deliverables. This is a good place 

to separate good consultants from bad ones.” 


High Anxiety 

Dread and uncertainty 
can hurt an IT group. 
Consultant and author 
Jeffrey A. Miller tells how 
to recognize anxiety and 


- Steve Romaine, chief strategist at Hartford Financial, 
author and former IT consultant. Page 44 


how are far more valuable than any calcula- 
tor, writes columnist John Berry. Page 45 | 


alleviate it. Page 43 


what steps you can take to 
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BITIN 


| Find and fix 1% of your soft- 
ware bugs, and 90% of your 
system problems go away, say 
experts. By Alan S. Horowitz 


BUGS ARE SMALL. Usually. Un- 
less, of course, they are of the software 
kind, in which case they can grow 
quite large and become hugely expen- 
sive to fix. The Sustainable Computing 
Consortium, a collaboration of major 
corporate IT users, university re- 
searchers and government agencies, 
estimates that buggy or flawed soft- 
ware cost businesses $175 billion 
worldwide in 2001. In the U.S., soft- 
ware bugs cost companies nearly 

$60 billion per year, according to the 
Commerce Department’s National In- 
stitute of Standards and Technology 
(NIST). More important is that one- 
third of these costs could be eliminat- 
ed with improved testing that catches 
errors earlier in the software develop- 
ment process, NIST says. 

Smart CIOs are creating comprehen- 
sive strategies to test for and fix bugs 
in both off-the-shelf software and ap- 
plications created in-house. They 
know that bugs, like infections, fester 
the longer they hang around and, as a 

result, cost more to 
deal with when left 
unchecked. 
Gartner Inc. 
analyst Theresa 
Lanowitz says a 
software defect 
left unfixed until 
late in the devel- 
opment cycle costs 80 
to 1,000 times more to fix than it 
would if it was dealt with earlier. No 
company is immune to the potential 
costs of software bugs, which is why a 
comprehensive plan for dealing with 
them is critical. 
“Bugs are a way of life. You 
have to accept that,” says 





| 





Vivek Wadhwa, CEO of Relativity 
Technologies Inc., a software vendor 
in Cary, N.C. 

“Every piece of software will have 
bugs in it,” agrees Lanowitz. 

Some are more easily recognized 
than others. For example, CIO Jose 
Marrero and his team at Agco Corp., a 
$2.5 billion manufacturer and distribu- 
tor of agricultural equipment in Du- 
luth, Ga., recently thought they were 
updating a particular record in a data- 
base when, in fact, because of a bug, 
the software was updating a different 
field. The cost to analyze and fix the 
problem: $30,000 to $40,000. 


Human Bug Busters 


Experts say software quality assurance 
is as much a people issue as it is a tech- 
nical one. “If you don’t change the way 
people work, it won’t help. To solve 
quality problems, you have to change 
what software people do,” says Watts 
S. Humphrey, a fellow at Carnegie 
Mellon University’s Software Engi- 
neering Institute. 

The institute trains programmers 
and engineers to work in self-directed 
teams and to manage their work. They 
become owners of their plans and 
processes and therefore take more 
responsibility for the quality of their 
products upfront. As a result, says 
Humphrey, engineers, who might 
spend upward of 50% of their time 
testing software after it’s developed, 
now devote as little as 10% of their 
time to postdevelopment testing. 

Regular communication among soft- 
ware developers and all stakeholders, 
including users, is also essential. 
Lanowitz recommends that software 

Continued on page 40 
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Continued from page 39 
development project teams, which 
should include the development man- 
ager, test manager and business cham- 
pion, meet weekly, with the same par- 
ticipants attending each meeting to en- 
sure that everyone involved knows 
what progress has been made and what 
problems have arisen. If bugs are hold- 
ing back a project, everyone needs to 
know as early as possible. 

This strategy is typically 
used by commercial soft- 
ware development compa- 
nies, but not by user com- 
panies, says Lanowitz. 

Foster Wheeler Inc., a de- 
sign, engineering and con- 
struction services company 
in Clinton, N.J., has created Web-based 
software for internal use called Bug- 
tracks. It tracks all information about 
bugs in real time, including who is 
working on any given bug, who is ulti- 
mately responsible and who the pro- 
ject managers are on both the business 
and technical sides. Bugtracks, says 
Foster’s corporate IT director, Victor 
Slaicetti, “allows business users to see 
what the status of bugs is. It ties the ac- 
tual developer to the actual business 
user. The benefit is, you put everybody 
on the same sheet of music.” 

But harmony isn’t always the result. 
One reason is that some developers 
don’t like to admit that they are the 
source of bugs, which is understand- 
able. “Developers like to hide their 
bugs. They regard them as a weakness 
or inferiority,” says Wadhwa. Observ- 
ers say this is especially true once the 
software has gone into production. 

To counter this problem, Jonathan 
Clark, chief technology officer at soft- 
ware tester VeriTest North America in 
Morrisville, N.C., offers fi- 
nancial incentives to devel- 
opers who find bugs in other 
developers’ software during 
the development process — 
say, $50 to $100 per hit, de- 
pending on the severity of 
the bug. Wadhwa gives simi- 
lar incentives, plus a party to 
the team that finds the most 
bugs by the end of the proj- 
ect. Such incentives motivate 
developers to find bugs be- 
fore the software is deployed. 


new software: 
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But first, bugs must be defined 
“Sometimes the [internal] customer 
thinks it’s a system issue, but about 
90% of the time we have bugs reported 
by customers, it’s more a process or 
data issue,” says Art Data, vice presi- 
dent of IT at International Truck and 
Engine Corp. in Warrenville, Ill. 


Defining Your Terms 

When someone on the business side 
can’t do what he expected to because 
of software limitations, he calls it a 
bug. But the developer usually views 
this as a change request, because the 
functionality wasn’t initially specified. 

For example, IDC analyst Christine 
Tenneson says she has seen cases in 
which the software for a 
database covering multiple 
regions was designed with 
selections for only general 
geographies, such as the 
Americas, but users wanted 
to select by country. Users 
call this a bug; developers 
call it a change request. 

For this reason, Andrei Chivvis, CIO 
at Converium Reinsurance Inc. in 
Stamford, Conn., does what might 
seem obvious: He requires users to 
sign off when they define their re- 
quirements and after they test in 
terms of performance. This forces 
users to think upfront about what they 
want, Chivvis says. 

Before he implemented this formal 
sign-off process, users were involved 
with software development but fre- 
quently didn’t think things through to 
the finished product. It was believed 
that if changes needed to be made lat- 
er, that was fine. This tended to short- 
en the development time but caused 
more headaches after the software was 
created. Chivvis is trying to change 
this problem with his new strategy, 
which he acknowledges is a difficult 
culture change. Users need to under- 
stand that ence the testing begins, 
specifications don’t change. 

A debugging strategy must also in- 
clude the programmers, notes David J. 
Agans, author of Debugging: 
The 9 Indispensable Rules for 
Finding Even the Most Elusive 
Software and Hardware Prob- 
lems (Amacom Books, 2002). 
“The assumption is that be- 
cause they have a degree in 
engineering, they know how 
to debug.” Not true, Agans 
says. Developers often ap- 
proach debugging as puzzle- 
solving, but it’s actually more 
investigative, a la Sherlock 
Holmes, he says. So train 





Dealing With 
Packaged Bugs 
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your developers in debugging. 

To accommodate the growing num- 
ber of external users, Bob Grawien, 
vice president of application develop- 
ment at trucking firm Schneider Na- 
tional Inc. in Green Bay, Wis., imple- 
mented a comprehensive testing pro- 
cedure to be used during the in-house 
development process. It begins with 
testing specific features in an isolated 
environment on a developer’s worksta- 
tion, followed by testing in an isolated 
system-level environment. Next comes 
application load testing, scalability 
testing and, finally, a user acceptance 
test. All of this is aimed at preventing 
bugs from making it into production. 

When bugs do creep through Schnei- 
der’s process and are found in produc- 
tion, there’s an IT help desk for users to 
call. If that group can’t determine the 
cause of the problem, it moves up to 
the next group, whose job is to keep 
production running. If the bug is still 
running around unchecked, the devel- 
opment team is brought in. This escala- 
tion process lets the development team 
focus primarily on development, while 
others deal with bugs first. 

Schneider’s bug management pro- 
gram has also implemented consistent 
ways to notify users of problems. For 
example, if a logistics application has 
a bug, IT has a list of users it calls 








to alert them to a problem in produc- 
tion, let them know what the ramifica- 
tions might be and tell them when to 
expect the software to be up and run- 
ning again. 

“We tend to view the world as an 
iron triangle: people, process and tech- 
nology,” notes Grawien. Project man- 
agers, for instance, are given well-de- 
fined deliverables and responsibilities. 

The company recently built isolated 
systems for a wide range of tests, with 
the goal of providing consistent quality 
improvement. And, on the technology 
side, it has invested in hardware and 
software, including a Segue Software 
Inc. tool that simulates multiple users, 
and a Sitraka Inc. software tool that an- 
alyzes software performance. Schnei- 
der also provides training on the tools 
for its development teams. 

Menasha Corp., a manufacturer of 
packaging materials in Neenah, Wis., 
goes a step further. 

“It’s not enough [to test] that the 
software ran to completion. We put a 
business model against it to validate it 
will respond in production,” says CIO 
Ed Wojciechowski. 

Testers consolidate a number of 
scripts for business processes, such as 
processing a sales order to ship a prod- 
uct. They then compare the software 
against historical trends, which, among 
other things, indicates how well cur- 
rent software works for the same busi- 
ness processes from a profit-and-loss 
perspective. It’s not enough that the 
new software works technically; it 
must perform better than what it’s re- 
placing in the real-world production 
setting, he says. 

It’s estimated that less than 3% of in- 
sects are actually pests in the natural 
world. VeriTest’s Clark says something 
similar happens with software: “One 
percent of software bugs tend to cause 
90% of the problems. [Fixing] your top 
10 bugs would solve so much of your 
problems.” 

Software bugs can’t be eliminated 
any more than all the insecticides in 
the world can eliminate creepy bugs. 
But experts conclude that if you focus 
on the peskiest ones, you'll go a long 
way toward eliminating most of your 
bug-related headaches. B 





Horowitz is a freelance business and 
technology writer in Salt Lake City. 
Contact him at alan@horowitz.com. 


A DEBUGGING PRIMER 


Go to our Web site to read an excerpt of David J. Agans’ 
new book on developing a debugging strategy: 


QuickLink 35491 
www.computerworld.com 








Is your hosting performance 
on the line? 


You bet it is...because hosted applications are the lifeline of your business. 


Which is precisely why enterprises like |-800-FLOWERS.COM*, ImageMax®, Nutrisystem.com®, 
and the U.S. General Services Administration are hosting their mission critical applications with AT&T 
and protecting their online business with: 


™@ The performance advantages of a 24x365 predictive management platform. 

@ The stability, security, and reliability of AT&T's global data centers. 

™@ The scalability, on-demand capacity, and ultra-availability of AT&T's enterprise network solutions. 
@ The industry-leading portal and reporting services for optimum control and visibility. 

@@ The assurance that they are supported by the expertise and resources of AT&T. 


Bottom line, when performance matters, count on AT&T to help keep your business moving forward. 
SWITCH 


There’s never been a better time to call AT&T. 
Contact your AT&T Account Representative or call | 866 365-2344, 
or visit www.att.com/performance. 
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When The Plug 
Gets Pulled 


How to survive and maybe 
even thrive in the wake of 
a canceled IT project. 

By Minda Zetlin 


Cas spent a year putting together a plan 


to install a computerized maintenance management 
system. With the system specifications and ROI 
analysis in place, Ghirlanda went to work implement- 
ing the project. Then things started to go wrong. 

Executives had selected software that seemed to 
fit their corporate goals, but it wasn’t the right soft- 
ware for the company’s technology needs. Faced 
with growing concerns, the company’s CIO decided 
to cancel the project, and Ghirlanda agreed with this 
decision. “We could not assure corporate leadership 
that the project would be a success,” he says. 

In these days of economic uncertainty, canceled 
projects are a fact of life. Although it’s never a pleas- 
ant experience, it doesn’t have to be a debilitating 
career setback for an IT project manager. The key is 
how you handle the cancellation. Here’s some advice 
from those who have been there on how to survive 
after the plug is pulled. 

@ Don’t take it personally. “Most of the time, it’s not 
that the team was doing things badly,” says Jeff Chas- 
ney, CIO at $3 billion CKE Restaurants Inc. in Santa 
Barbara, Calif. Chasney characterizes himself as 
a “turnaround CIO” who is often hired to make 
changes in troubled IT organizations. He says he has 
canceled at least 12 major projects in the past few 
years — including the one Ghirlanda was working 
on. “Better than 50% were because the company was 
changing direction,” he notes. “In other cases, it was 
the right project at the wrong time, or it didn’t match 
the organization’s culture.” 

& Treat it as a completion. Do the things you would 
after a successful completion. “It’s really important 
that the project manager does the regular closeout 
activities,” says Karen White, director of resource 
management at Project Management Solutions Inc., 


IN A PREVIOUS JoB at a large refining 
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JEFF CHASNEY of CKE Restaurants says most canceled IT proj- 
ects are the result of organizational changes, not staff failures. 
a consulting, training and research company in 
Havertown, Pa. As both a consultant and an internal 
project manager, she has been through several proj- 
ect cancellations in her career. 

“Close the files in an orderly way, do the team 
awards and lessons learned,” White says. “You need 
to recognize that there’s a grief period and help the 
team through it — and still have the ending celebra- 
tion to say, ‘We took our best shot.’ This is important 
for team morale.” 

@ Make sure the team isn’t blamed. “Both the project 
manager and the project’s business sponsor need to 
make sure the team is not labeled as a failure,” White 
says. For instance, a major project White was work- 
ing on at a financial services company was canceled 
when the firm was acquired. 

“We made sure the team got awards and recogni- 


et 
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Cancellation 
As a Career Plus 


A few years ago, Karen White was principal informa- 
tion systems analyst at now-defunct Wang Laborato- 
ries Inc. She and her team built a large data repository 
for the company’s hardware sales segment. 

The project was a high-profile success, and the 
maintenance department requested that White's team 
do the same for it. But after a feasibility study, the 
team concluded that the department's reporting was 
incompatible with the system it wanted. 

So White sat down with the project's business 
sponsor and explained why it wouldn't work. “A lot of 
angst comes into play when you do that,” she says. “I 
thought, ‘I just shot down my own project. Now | don’t 
have a project to manage.’” 

The business manager, however, was impressed 
with her willingness to state an unpopular truth. He be- 
came a valuable advocate for her within the corpora- 
tion. “There were other instances when | needed his 
political support, and he was always there,” she says. 

Jeff Chasney, CIO at CKE Restaurants, confirms 
that a project manager who volunteers to cancel a 
project that’s in trouble can gain respect from top 
managers. “It’s a real career enhancement when 
someone can forecast out and see that a project 
won't work,” he says. 

“Don't be afraid to recommend a cancellation,” White 
says. “After all, it’s much better to cancel something 
than to complete it - and then have it sit on a shelf.” 

~ Minda Zetlin 


tion and bonuses,” she says. “It wasn’t their fault the 
corporation was sold.” 

@ Keep your eye out for the next project. “A project can 
always be canceled, so it’s important to keep net- 
working,” Ghirlanda says. White advises project 
managers to keep their skills and certifications cur- 
rent. “Don’t always have lunch with your project 
team — eat with other folks from your company as 
well,” she counsels. In effect, White says, “you’re al- 
ways interviewing.” 

@ Learn from it. “I look for whether people have 
learned the lessons of a canceled project,” Chasney 
says. For instance, he says, if a project was canceled 
because of spiraling expenses, “I expect to see far 
more diligence and for them to be watching the bud- 
get numbers more closely.” 

In some cases, the company and the project manag- 
er are simply a bad fit. That’s the conclusion Ghirlanda 
reached after his maintenance project was one of a 
whole suite canceled by the refining company. About 
a year later, he began looking for other opportunities, 
and he’s now a reliability systems planning manager 
at Eastman Kodak Co. Of his old firm, Ghirlanda says, 
“It became clear they weren’t going to invest the re- 
sources in IT projects.” D 





Zetlin (minda@mindazetlin.com) is a writer in 
Woodstock, N.Y. Her latest book is Telecommuting 
for Dummies (Hungry Minds, 2001). 
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Dread and uncertainty can hurt an IT 
group. What to do? By Kathleen Melymuka 


N IT MANAGER and a pro- 
grammer at a large East- 
ern frozen food company 
were locked in mortal 
: combat. “Bob,” the pro- 
grammer, was working 60- to 80-hour 
weeks for “Larry,” his manager. But Bob 
thought that Larry didn’t appreciate his 
efforts and that he often threw back per- 
fectly good code as unacceptable. Bob 
was so distraught that he was literally 
hiding from Larry. 

Larry was equally annoyed at Bob, 
whose work he considered substan- 
dard. He wanted Bob out, but he knew 
that if he fired him, the IT department 
would miss a critical deadline. 

When organizational consultant Jef- 
frey A. Miller was brought in, he found 
that the problem was neither Bob nor 
Larry; it was the anxious atmosphere of 





the organization where they worked. 

A little anxiety can be a good thing, 
as when keen competition forces com- 
panies to work smarter. But when orga- | 
nizational anxiety rises and isn’t han- 
dled well — when employees begin to 
blow up or hide out — productivity 
can suffer in unpredictable ways. 

The root of Larry’s and Bob’s anxiety 
was that their company had just made 
a huge acquisition, and the IT group 
had been charged with integrating the 
two information systems within a time 
frame that seemed impossible to them. 
To make matters worse, Larry’s boss, 
“Ted,” was playing out his own stress by 
micromanaging, adding to the tension. 
And his “overfunctioning” was affecting 
people’s performances by leading them 
to “underfunction,” according to Miller. 

If this scenario seems familiar, you 





may be working in an anxious organi- 
zation, and you may not be aware of it, 
says Miller, author of The Anxious Or- 
ganization: Why Smart Companies Do 
Dumb Things (Facts on Demand Press, 
2002). Organizational anxiety can re- 
sult from inappropriate, unarticulated 
or conflicting goals, time pressure, bad 
leadership, mixed messages and the 
helpless feeling that you’re damned if 
you do and damned if you don’t. 

Often, people like Bob and Larry de- 
flect attention from the real problems, 
such as time pressure and poor leader- 
ship. “People think: ‘Fix them, and we 
fix the problem, ” Miller says. “But 
they may not have identified the prob- 
lems. This is very common in IT.” 

“I see this type of anxiety in every 
shop I go to,” says Tom Murphy, CIO at 


Royal Caribbean Cruises Ltd. in Miami. 


“T’ve seen cultures where interper- 
sonal clashes were considered good 
for the organization,” says Ed Bell, CIO 
at Commonwealth Financial Network 
in Waltham, Mass. “Feuding and finger- 


pointing are offshoots of these interper- | 


sonal clashes. The net result was proj- 
ects took longer or never got started, 


turnover was high, and people were hes- 


itant to make decisions or take risks.” 

The more people focus on these 
symptoms, the more anxious they be- 
come and the less able they are to see, 
let alone solve, the real problems, 
Miller says. 

Organizational anxiety can also af- 
fect the business in subtle but equally 
destructive ways. “In the face of con- 
sistent and acute anxiety, people really 
pull inward,” says Miller, who is also 
president of Jeffrey A. Miller & Associ- 
ates in Chicago. “They’re not likely to 


| be very creative or flexible or to make 


decisions other than the same ones 
that have always been made. No one 
wants to break stride from the pack 
when anxiety is high.” This leads to 
“group think,” which keeps individuals 
from challenging bad ideas. 

Because change can breed anxiety, 
IT is prone to it, Miller says. But IT 


people can also alleviate anxiety if they | 


think of the organization as a system. 
“This isn’t psychology; it’s systems,” 
Miller says. “Change the program a lit- 
tle, and you might get it to run.” 

Miller suggests that IT managers 
start with their own relationships. 
“Deal with each person directly, not 
through someone else,” he says. 

Meanwhile, look for an opportunity 
to change something for the better. 
“It’s just like writing code or plotting a 
system,” he says. “Once one part of a 
system changes, the whole system is de 
facto different.” 
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“IT professionals are responsible for 
change within the organization,” says 
Virginia Robbins, IT director at Chela 
Financial Cos. in San Francisco. “IT 
drives change. Our behaviors drive the 
culture and thus influence and change 
the culture every day. We are either 
part of the company’s positive culture, 
or we're the problem.” 

Anxiety and calm are contagious, 
Miller says. If you can calm down the 
system, people will loosen up and be- 
gin to address the real problems 

That’s what happened with Bob, Lar- 
ry and Ted. Miller helped Bob notice 
that the more detail he added to his 
work, the less Larry complained. Be- 
cause Bob didn’t need to redo his 
work, he went heme earlier. He and 
Larry began to work out a better rela- 
tionship. Ted stopped micromanaging 
and let his staff take charge. All three 
found that as they stopped feeding 
their anxiety, they had much more en- 
ergy to do the work. The bottom line: 
They got the project done on time. D 





Melymuka is a Computerworld 
contributing writer. Contact her 
at kmelymuka@earthlink.net. 


ARE YOU FULLY FUNCTIONAL? — 


To find out, go online and read this book excerpt from 


| Jeffrey A. Miller's The Anxious Organization 


QuickLink 35439 
www.computerworld.com 


How High Is 
‘Too High? 


If your answer to most of the following 
questions is yes, the anxiety level in your 
IT department is probably too high: 


® Do people take sides with others 
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Current job: Chief strategist, tech- 
nology group, Hartford Financial 


Previous positions: High-level 
consulting and managerial positions 


at KPMG Consulting Inc 
Monitor Co., NationsBan 


The 
Corp., 


Informed Technology Decisions and IBM 


Home: Fairfield, Conn. 


Most recent book: Soldier of Fortune 500: A Man- 
agement Survival Guide for the Consulting Wars 


Steve Romaine, chief 

strategist in the technolo- | 

gy group at Hartford 

Financial in Hartford, 
Conn., is a former IT consultant and 
author of Soldier of Fortune 500: A 
Management Survival Guide for the 
Consulting Wars (Prometheus Books, 
2002). In his book, he caiididly chroni- 
cles his experiences as a highly paid IT 
consultant for IBM, Bank of America 
Corp., Chase Manhattan Bank Corp. 
and other large U.S. companies. 

Unlike other professions, there is no 
licensing requirement for consultants, 
Romaine points out. Anyone can do it. 
And they do, which he says contributes 
to a culture where politics rule and the 
most important objective in any consult- 
ing contract is to secure the next con- 
tract. Romaine says he wrote the book 
“to provide guidance in recognizing 
potential abuses and avoiding them in 
the future.” He recently talked with 
Computerworld’s Julia King. 


You've been on both sides of the fence. 





Where would you say probiems first surface? 


What are the early warning signs of potential 
abuse? What often happens is a consul- 
tant comes in and says, “We have a 
game plan we used before. It’s a best 
practice. Get someone out of your 


| business unit to be the project sponsor 


and head that up.” Consulting firms 
say they need a high-level sponsor [at 
the client company] because it’s im- 
portant to make sure the business unit 
buys in. But the problem is that the 
client company is often getting such a 
senior-level executive that they’re not 
there to run the project on a day-to- 
day basis. Senior executives don’t un- 
derstand the technology, but they don’t 
want to appear not to understand, so it 
creates a dependency on the consul- 
tant. That’s a huge issue. 


You raise an interesting issue about best 
practices. Consulting firms like to tout their 
vertical industry expertise. But what value is 
it to Company B to have a consulting firm de- 
ploy the same systems and processes it de- 
ployed for Company A, especially if they’re in 
the same industry? If it’s something that’s 
a core competency of your business, 





something you're hoping will give you 
a competitive advantage, don’t bring in 
consultants who will learn on the job 
[and] then go across the street and 
work for the next guy. You have to be 
careful not to train the workforce of 
your competitor. Sometimes, best 
practices make a !ot of sense if you can 


| gain competitive information, but you 


have to put parameters around it to 
make sure you’re not becoming a me- 
too operation. 

If a company can identify core com- 
petencies to provide competitive ad- 
vantage, that’s not the place to bring in 
a vertical best-practices consulting 
firm who's going around to all of your 
competitors. On the other hand, it 
might be the thing to do if you’re try- 
ing to figure out what your competi- 
tors are doing. 


Consultants bill by the hour, which can get 
extraordinarily expensive for companies. Any 
tips for keeping a lid on their hours? Con- 
sultants get caught up in “analysis 
paralysis” because they’re trying to 


| bill out as much as they can. It makes 


sense for companies to define their 
[project] requirements before they hire 
an outside consultant or to divide up 
the work, because there’s a conflict of 
interest if you hire the same consulting 
firm to do both [the requirements 
planning and the implementation]. For 
example, you’re not going to see a firm 
with PeopleSoft consultants on their 
bench recommend SAP. 


You write that many companies make the 
mistake of bringing in consultants to solve 
political infighting. Why doesn’t this work? 
With businesses operating so much 
tighter today and people trying to re- 
duce costs, a lot of companies are get- 
ting back to alignment between busi- 
ness and IT. There’s still a lot of in- 
fighting in some companies, and there 
are turf wars. Consultants come in and 
play one group off another. 

Here’s a perfect example: A compa- 
ny’s objective is to eliminate its data 
silos that were created by different 
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business units all using different appli- 
cations. The business model of some 
consulting firms is to have a consulting 


| partner responsible for different parts 


the Cold 


of the [client company’s] business. At 
NationsBank [now part of Bank of 
America], we had a consulting partner 
responsible for check processing and 
another partner for electronic pay- 
ments. They were competing for the 
same business, and they had no incen- 
tive to eliminate the silos. One guy was 
there to get the check-processing busi- 
ness, and the other guy wanted the 
electronic payments business. 


Consulting companies often promise to train 
a client's IT workers so they can maintain 
systems once the outsiders leave. How can a 
company ensure that this actually happens? 
Technical complexity is a best friend 
for some consultants. Knowledge 
transfer in the long run isn’t going to 
help consultants get more business. 
So make sure it’s in the contract up- 
front as one of the deliverables. This 
is a good place to separate good con- 
sultants from bad ones. DB 


REELING ’EM IN 


Author Steve Romain describes his tactics for acquiring 
CIO clients at big-name companies: 


QuickLink 35450 
www.computerworld.com 





Tips for Managin 
Comaione . 


#@m&. Don’t use consultants 
= to broker vendor deals. 
@» Thoroughly check the 
“= backgrounds, creden- 
tials and references of 
consultants. 
Never shift manage- 
ment decisions to 
consultants. 


Make skills transfer and 
ponents of getting paid. 
Pay for consultants 

to fly coach class only. 
It forces them to mix 
with real people. 


SOURCE: SOLDIER OF FORTUNE 500: A MANAGE- 
MENT SURVIVAL GUIDE FOR THE CONSULTING WARS 
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OUTLOOK 


Gartner’s View for 
IT Pros in 2003 


IT professionals should take time 
in 2003 to enhance their per- 
ceived value and better under- 
stand business priorities, Stam- 
ford, Conn.-based Gartner Inc. 
advises. Here are eight guidelines 
to consider: 

= Take inventory of your tech- 
nology and business knowledge. 
Be honest about bare spots, and 
expand your knowledge. 

= Get smart about the key 
drivers of your company’s busi- 
ness. Network with business 
counterparts to discuss their fi- 
nancial and operational objectives. 
Become the business-knowledge 
liaison to your IT team. 

aldentify required services. By 
understanding your business, you 
will be able to identify and imple- 
ment services that will help drive 


your company’s success. Integra- | 


tion, process insight and versatil- 
ity will be watchwords. 

= Become an evergreen profes- 
sional. Pursue emerging and en- 
during knowledge, competencies 
and experiences. 


= Seek leadership opportunities 


and accountability. This isn’t 
the year to lay low. Mergers and 
acquisitions, consolidation and 
globalization will increase the 
number of projects and internal 
initiatives. Step up to the plate. 

= Strengthen your knowledge 
of business principles. There are 
dozens of ways to gain business 
acumen: accounting, communica- 
tions, financial analysis, market- 
ing, cost management and so on. 
Additional business know-how 
will enhance your career and in- 
crease your credibility in the busi- 
ness units within your company. 

= Get connected. Network with 
project leaders and champions. 
Careers are built on both what 
you know and on who you know. 

= Find new value in prior IT 
investments. Revisit the applica- 
tions and technologies that have 
been deployed and reapply func- 
tions and features to new proc- 
esses. Your success will depend 
on your newfound knowledge of 
business processes, customer 
markets and financial goals. 
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Calculating From 
Experience 


S 2003 UNFOLDS, a fantastic tale will 
emerge in which a wise manager, after 
witnessing a software sales presentation, 
will see so clearly the profound impact 
the proposed technology can have on the 
business that the organization will dispense with eco- 
nomic modeling and plow ahead with the investment. 


Rare? Yes. Radical? Maybe. 
Yet perhaps you'll be the 
revolutionary who gets to 
defy conventional wisdom. 

Remember, one of the 
primary goals of modeling 
the economic impact of IT 
is to help managers decide 
if and when to make a cal- 
culated bet on a technol- 
ogy. I argued in my first 
Computerworld column 
[July 22, 2002; QuickLink 
31362] that many types of 
IT investments defy finan- 
cial measurement; these 
technologies enable the 
execution of more strategic business 
activity. Since IT is woven into the fab- 
ric of business operation, these neces- 
sary IT investments are required if 
more strategic kinds of investments 
are to be made. Examples of necessary 
technology investments include data 
warehousing, connectivity, middle- 
ware and storage. Without them, 
strategic investments in CRM, supply 
chain, procurement and product col- 
laboration are impossible. 

You can model and debate the eco- 
nomic returns of a storage-area net- 
work (SAN) until Judgment Day. Fact 
is, a SAN might be a prerequisite for 
an ambitious supply chain project un- 
der discussion. 

Alternatively, managers are advised, 
hectored and warned to financially 
model risky strategic investments as a 





precept in sound manage- 
ment and as a vaccination 
against economic and ca- 
reer doom. Proper model- 
ing, the argument goes, re- 
veals the novelty in many 
kinds of software. This is 
because the software de- 
mands that companies be- 
gin conducting activities 
differently. Doing business 
differently means risk, and 
risk demands accurate 
quantification of costs and 
benefits before the invest- 
ment is made. 

; As it happens, the eco- 
nomic potential of that risky strategic 
technology might hit you so hard be- 
tween the eyes that a fully loaded busi- 
ness case becomes irrelevant — if not 
a waste of time. 

Consider this example — no, fairy 
tale. A computer-aided design (CAD) 
software vendor was pitched a sales- 
lead management application as a 
means to automate its relationships 
with its resellers. The business bene- 
fits blared out to the chief operating 
officer of the CAD software company. 
To him, the economic justification was 
obvious. So, he decided, why bother 
formulating a financial business case? 

The CAD vendor’s resellers were lax 
in communicating with the company. 
They failed to confirm receipt of new 
leads or update the vendor on the sta- 
tus of a lead as it evolved in the sales 





cycle. By implementing a rules engine 
in the lead management application, 
the vendor changed the resellers’ be- 
havior by forcing them to update the 
company on the status of all leads 
before receiving new leads. And we 
all know a lead is the salesperson’s 
crack hit. 

Another benefit the vendor recog- 
nized was the acceleration of leads 


| into the sales pipeline. Historically, 


leads were collected, dropped into a 
spreadsheet and shipped off weekly to 


| the resellers. When leads are plugged 


into the software sooner after capture, 
resellers act upon them more quickly. 

Had the vendor’s COO bothered with 
a business case, he would have found 
the metrics for justifying the expendi- 
ture to be straightforward enough: im- 
proved cash flow from a compressed 
sales cycle, increased sales from action 
taken more quickly on newly captured 
leads and improved marketing effec- 
tiveness arising out of much-improved 
reseller feedback about leads in the 
pipeline. The vendor can now track 
marketing more directly with the per- 
formance of any lead it generates and 
refine those efforts accordingly. 

The moral of this story is not that 


| measurement isn’t important. It is, 


rather, that managerial experience and 
know-how have certain advantages; 

a lesser COO sitting in on the CRM 
application sales pitch wouldn’t have 
recognized the creative way in which 
this application could be used to boost 
the company’s competitive position. 
The moral is also that the success of 
IT projects is as much about the qual- 
ity of people as it is about the rigor 

of ROI models. You might get your 
chance to prove it in 2003. D 


WANT OUR OPINION? 


For more columns and links to our archives, go to: 
www.computerworld.com/opinions 
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HCL TECHNOLOGIES AMERICA, INC. 


HCL Technologies America, Inc. and its affiliate companies like 
HCL Enterprise Solutions and HCL Technologies (Mass.) Inc 
have multiple openings at its offices in Sunnyvale CA 
Stamford CT; Plano TX; Fiorham NJ, Irvine CA, Vienna, VA. 
Boston, MA, Chicago, IL, Detroit, MI as well as project sites 
throughout the United States for the following positions 


Software Engineers 
Programmer Analysts 
Systems Analysts 
Database Administrators 
Hardware Engineers 
Budget Analysts 


Systems/Network Administrators 


Project Managers 


Account Managers/Sales Managers/Business Managers 


Sales Engineers 
industrial Engineers 


Market Research Analysts 


Management Analysts 


Human Resource Representative 


Accountants 


Salary will be commensurate with education and experience 
All positions may involve travel or relocating to various client 


sites through out the US 


For consideration please send your resume to 


HCL America Technologies, Inc 


Attn.: HR Dept. (Computerworld Ad 


330 Potrero Avenue 
Sunnyvale, CA 94085 


Email: cwjobs@hcltech.com 


Please indicate the location and the position you are 


applying for. 


www.hcitechnologies.com 


Web Developer/Programme; 


Multiple positions available to 
primarily develop web-based 
computer applications, app! 
knowledge of computer pro- 
gramming techniques & sys- 
tems 


uirements Bachelor's 
degree in Computer Science or 
related fi Must possess 3 
post-baccalaureate work 
position offered or in 
ler industry Must be 
knowledgeable & proficient in 
1) one of the following databas- 
s (Oracle, VSAM, DB2, SQL 
Server or Teradata); (2) JAVA 
and (3) one of the following high- 
languages VB/ASP 
Lor C/C++). Must be will- 
> travel & relocate to 
sites nationwide freq: 
Replies with ref. Code CW2003 


Software Engineer. Dev 
Warehousing data mart & 
various Logical/Physical 
data models, Unix Scripts 
using Erwin 4.0 & ETL for 
perf. Tuning appl. In Test 
& Production environ- 
ment. Req: MS in Com 
Sci. or Comp. Eng. 40 
hr/wk. Job/Interview Site 
Simi Valley, CA. Send 
resume to Soclear Corp 
P.O. Box 2111, Simi 
Valley, CA 93062-2111 


Paymap, Inc., a Division of First 
Data Corporation, a company in 
Greenwood Village, CO special- 
izing in electronic commerce: 
money transfer, has an opening 
for a Senior Database 
Administrator to work in San 
Francisco, CA and other unan- 
ticipated job sites in the U.S 
installation, configuration and 
upgrading of Oracle server soft- 
ware-related products. Req 
uires bachelors degree or for- 
eign equivalent in engineering or 
computer science; 3 yrs. experi- 
ence as an Oracle database 
administrator on Sun Solaris 
and Windows NT platforms 
working knowledge of installa- 
tion & configuration of Oracle 
plication servers & standby 
tabases, deploying Oracle 
n the web, design & cre- 

n of OLTP & data warehouse 
databases, PL/SQL and Shell 
Programming, as well as Oracle 
Enterprise Manager. Respond 
sume to Norm Barnett, First 
tion, 6200 S 
nwood Village. 

) and refer to job 
#4440MO 


Sr. Programmer Analyst, 
Denver, CO. Plan, devel- 
op, test and document 
computer programs using 
RPG/400 programming 
techniques and AS/400 
hardware. B.S., comput- 
er science or related field 
and 2 yrs relevant experi- 
ence. Fax resumes to N 
Prentice, TransMontaigne 
Product Services inc., 
303 626 8245. 


IT CAREERS 


A position is available for a 
Quality Assurance Technician 
with an Atlanta-based technolo- 
gy solutions company The 
company architects and designs 
next generation software for 
point-of-sale and Internet sys- 
tems in the retail industry includ- 
ing entertainment, petroleum 
with convenience or food stores 
and restaurants 


The Quality Assurance Tech 
nician is primarily responsible 
for assisting the Quality 
Assurance Manager in the 
development of standardized 
repair processes in an effort to 
identify “best practices” and 
instill quality into the company's 
products. Specific responsibil 
ties include developing stan- 
dardized repair procedures for 
all new products and assisting in 
the planning and implementation 
of testing strategies 


Candidates should possess a 
Bachelor's degree in Computer 
Engineering or other engineer- 
ing related field and five years’ 
experience in board-ievel repair 
testing, database management 
and computer systems repair 


Apply by mail to: 
Christie LoCurto 
3925 Brookside Parkway 
Alpharetta, Georgia 30022 


Seeking software engineer with 
Master's Degree in Computer. 
Electrical Engineering, Physics 
or Math + 3 yrs. exp. as 
Software Engineer or Software 
Developer to research, design 
& develop computer software 
systems applying principles & 
techniques of computer science, 
engineering, and mathematical 
analysis & work with wide vari 
ety of platforms. Analyze soft- 
ware requirements, corisult with 
hardware engineers & other 
engineering staff, evaluate inter- 
face between hardware & soft- 
ware & operational & perfor- 
mance requirements of system. 
Formulate & design software 
system. Develop & direct soft- 
ware system testing procedures. 
programming, & documentation 
Consult with customers on 
maintenance of software system 
& coordinating installation of 
software systems. Must have 
experience with XML standards. 
XSLT; J2EE Architecture; EJB 
1.1 and EJB 2.0; JMS; JSP. 
Java Swing Java BEA 
Weblogic and Customizing GIS 
software; Rational Tool Suite: 
UML; Object Oriented Design 
Oracie/MSSQL; C and C++; and 
Sun/Windows software and 
hardware. Salary: $85,000.00 
yr. 40 hrs./wk. Applicants must 
send two (2) copies of resume to 
Job Order #2003-086, P.O. Box 
989, Concord, NH 03302-0989 


SOFTWARE CONSULTANT 


Analyze & evaluate existing or pro 
ed software sys. Dsgn, dvip 
sment & improve 

sys. and related proc 

process data using in-depth knowl- 

the software dvipmnt life 
cycle. Encode, test, debug & install 
operating programs & other sys 
software utilizing knowledge of 

RDMBS environments & Power 

Builder. B.S. (or equiv.) in Comp 

Sci., Comp. Eng 

field + 2 yrs exp. in position offered 
s a Prog. Analyst, Sys. Analyst 

ftware Engnr reqd. Exp. 
must include: (a) Oracle, Sybase 
or SQL Server; and (b) Power- 

Builder. High mobility preferred. 40 

8:00 a.m. to 5:00 
000/yr. Qualified appli- 
cants submit resume to: Manager, 

Washington County Team PA 

CareerLink, Milicraft Center, suite 

150LL, 90 West Chestnut Street, 

Washington, PA 15301-4517 

Please refer to Job Order No 

WEB 295707 


directly related 


Senior Software Developer. 
Provide architectural direction to 
web app. projects. Design, 
implement and deploy web 
apps. using J2EE. Execute pro- 
jects using RUP. Provide object 
and component modeling using 
UML. Provide integration solu- 
tions between J2EE and EIS 
platforms using JCA. Design 
implement and deploy HROR- 
BIT Project on UNIX platform 
with performance tuning by clus- 
tering and load balancing of 
Weblogic app. Server. Provide 
SOAP based XML messaging 
solutions. Must have B.S. in 
Comp. Sci., Eng. or related 
degree + 1 yr. exp. in job offered 
or Software Engineer. Must 
have knowledge of J2EE and 
EIS platforms (PeopleSoft) 
using JCA; ADK; SOAP, XML 
messaging, RUP, UML and 
UNIX. $72,000/yr. Send resume 
+ cover letter to CMC, Attn 
Aisha Butcher. 6951 Pistol 
Range Rd., Tampa, FL 33635. 


GIS Software 

Quality Contro! Specialists 
GIS Software test planning and 
preparation Generate test 
cases and scripts using geo- 
graphically referenced data, 
report and coordinate tes: stivi- 
ties, execute test scripts, record 

Its in a defect tracking pool 
and implement sound QA test- 
ing practices using GNIS, LODE 
data, GE Small World, Framme. 
Microstation & Autocad 
Communicate and resolve QA 
issues with Programmers and 
Developers. Develop & initiate 
quality standards for new soft- 
ware tools to implement new 
versions of GiS. 2 years exp. in 
job offered required. Think 
Resources, Inc., Attn: GIS 
Recruiting, 280 Technology 
Parkway, Norcross, GA 30092 
No phone calls please. EOE 


PerfCap Corporation is looking 
for a senior software engineer 
responsible for the architecture 
and development of the compa- 
ny's systems performance and 
capacity planning software prod- 
ucts that are intended for 
secure web based performance 
management of hybrid IT infra- 
structures with multiple plat- 
forms like HP-UX, IBM-AIX, Sun 
Solaris, TRU64 Unix and 
Windows 2000. Duties involve 
development of system data col- 
lectors for the mentioned plat- 
forms, web based GUls and 
management servers. Requires 
JAVA C/C++ programming 
and SQL Server. A bachelor's 
degree in Engineering or 
Computer Science with five 
years experience. Salary $82K 
Submit 2 copies of resume to 
Job Order # 2003-078, PO Box 
989, Concord, NH 03302-0989 


SolutionsiQ seeks DB Engr. for 
HQ office in Bellevue, WA. 
DES! Dsgn, dev, & cust 
RDBMS, web based tools, com- 
ponents & progs, & encryption 
techs. for impl. into multi-user 
financial transactions sys. util 
SQL, C#, XML, ASPX, internet 
protocols, component based 
techs., OO dsgn. & dev, and 
NET on Win based o/s. REQS: 
BS in Engr, CS, Math, or 
Physics + 5 yrs. exp. dsgn, dev 
& impli. RDBMS & rel. apps. for 
multi-user financial transactions: 
sys. util. SQL, internet protocols 
component based techs, OO 
dsgn. & dev., HLL, and Win 
plats. Prem. sal + benes. 
reply to D. Witlmart. Job # SIQ- 
214, 1260-116th AVE NE 
Believue, WA 98004 


Computer Network 
Analyst 


Computer Consulting Co 
seeks qualified indiv. to ana- 
lyze, design, test & evaluate 
network systems. Req'd 
Master Degree in Comp Sci 
Must have MCSE/MCSA 
Must have exp. with Java, 
Unix, &TCP/IP through edu- 
cation or employment; Pls 
send res to: Infovalue 
Computing, Inc. 4 West- 
chester Plaza, Elmsford NY 
10523 Attn: Sharon Chen 


PROGRAMMER-ANA- 
LYSTS needed to analyze 
use-cases & class dia- 
grams using Rational Rose; 
dsgn & customize Livelink 
applics w/web_ interface 
using Livelink Builder & 
SDK; create interfaces to 
generate Web docs; create 
workflows & dsgn forms 
using Livelink (Workflows, 
Forms, LAPI), OScript, 
SQL, JSP, JavaBeans & 
JDBC. Apply to: Global 
Consultants, 601 Jefferson 
Rd, Parsippany, NJ 07054. 


Computer Consulting 
Co seeks program- 
mer analysts & data- 
base administrators. 
Bachelor's +2yrs IT 
exp. Resume to Upp 
Business Systems, 
3075 Highland Park- 
way, Downers Grove, 
iL 60515. 


Clear Technology is look- 
ing for Soft. Develop- 
ment Engs & Progr 
Analysts. Resumes by e- 
mail/fax only to HR 
Clear Technology, 11030 
Circle Point Road, 
Westminster, CO 80020; 
Fax (303) 583-4168 
software.analysts@ 

clear-technology.com 


Senior Software Eng. 
with Masters degree 
and two years exp. 
wanted in Houston, 
TX. Respond to: HR 
Dept., Houston Com- 
puter Center, Inc. 
10641 Harwin Dr., 
Suite 500, Houston, 
TX 77036. 
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CONSULTANT Analyze’ 
user needs & requests, 
design, dev. & implement 
med. to Ig. apps. using var- 
ious software technologies, 
such as Java, Javascript, 
HTML, ASP, Lotus, SQL, 
MS Office, Dreamweaver, 
Frontpage, Photoshop, & 
ACCESS. Must have MS in 
Comp. Sci., MIS, Infor- 
mation Systems or related 
field. Send res./cov. ltr. to 
Patricia Sirabella, HR Dir., 
Gemini Systems, Inc., 61 
B'way, #925, NY, NY 10006 


Software Developer 


Develop customized software solu- 
tions to address client's business 
and commerce needs. Must have 
Bachelors Degree in Computer 
Science or in a related field & 3 yrs. 
exp. or 3 yrs. exp. in a related posi- 
tion w/ability to use: Oracle, Win- 
dows, Visual Sourcesafe. Willing to 
travel and relocate across the U.S 
40.0 hrs./wk 8:00 AM — 6:00 PM 
$76,000/Yr. Applicants send cov- 
er letter and resume to: 

SRA Systems Limited 

1945 Cliff Valley Way 

Suite 270 

Atlanta, GA 30329 

Attn: K. Markandan 


Page & Olson is a CPA firm, 
developing an unique software 
Icommander for CPA firms run- 
ning on TCP/IP LAN. We look for 
software engineers or system 
analysts. Candidates must have 
BS with exp. using ColdFusion 
and ASP. Send resumes: P.O. Box 
368Mt. Pleasant, MI 48804-0368. 


Adept Computer is seeking IT pro- 
fessionals/engineers. Qualified 
applicants must have BS with min- 
imum 1-yr exp. Skills in Oracle. 
Jave, XML, J2EE, SQL, JSP, 
WebLogic/WebSphere. 0B2 
JDBC, Client/Server are plus. 
Apply at 1010 Harmon Bivd 
Hoffman Estate, IL 60194. EOE 


Kwikset is looking for the fol- 
lowing positions 


Software Developer. 

IT Supply Chain Logistics 
Project Mgr. to work w/QAD- 
Mfg/Pro, costing modules, 
EDI and quality mgmt 
Masters degree & 2 yrs. exp. 


Resumes by fax/email only 
to HR, Kwikset, 19701 
DaVinci, Lake Forest, CA 
92610; Fax (949) 672-4761; 
e-mail; apply@bdhhi.com 


Software Engineers needed for 
Houston based firm to work in 
various unanticipated U.S. loca- 
tions, to design, develop, imple- 
ment complex financial business 
performance management solu- 
tions, incl. planning, budgeting. 
cash flow analysis, forecasting, 
reporting applications. Utilizing 
OLAP, decision support systems 
technologies and SQL. Must 
have Bach. in Comp. Sc. or CIS 
and 5 yrs. exp. in job offered 
Fax resume to COMPQSOFT, 
HR Dept. at 281-272-2515. Ref 
Code: Put SE-1102 on the 
resume 





IT) careers.com 


Analyst; User Support Analyst 
Mgr. needed by jewelry mfrg. 
co. to manage internal proj for 
ERP syst implementation 
(Microsoft Navision), manage 
info syst development & develop 
user procedures, define & 
develop mgmt level Perfo- 
rmance Measurement Systems 
(PMS), develop contract mfrg 
planning & controlling syst using 
Navision C/AL & supervise 3 
User Support . Bach Deg or 
Equiv in Computer Sci or Eng 
Mathematics & 4 yrs exp in this 
field. Send res to: Mr. Joe 
Manber, Andel Jewelry LLC. 
31-00 47th Ave, LIC, NY 11101 


Multiple openings available for 
Prog/Sys Anal, DBA’s, Syst/Ad- 
min and S/W Engineers to design 
develop S/W applis using some 
of the following - C++, VC++ 
Java and web related technolo 
gies, HTML, VB Script, CGI, SQL 
TSQL, MS Access, Visual Inter- 
dev, Active X, COBOL, CICS 
DB2, SAP, ABAP etc. on Win- 
dows, UNIX, NT/Server E OS 
Sun Solaris, etc. Ail positions 
require a BS/MS or its foreign 
equivalent. Competitive salary 
Some travel/relocation required 
Apply to: HR, CipherTrust, Inc 
11475 Great Oaks Way, Ste 210. 
Alpharetta, GA 30022 


NEED TO HIRE? 
SON men mek) 


ITcareers and \Tcareers.com 
reach more than 2/3 of all US 
IT workers every week. If 
you need to hire top talent. 
start by hiring us 


Call your ITcareers Sales 
Representative or Nancy 
Percival at 
1-800-762-2977 


ITCAREERS 


Software Engineer. Design, 
build & maintain networking 
Cisco/LAN & sec. sys. in- 
cluding user interface (JSPs) 
& backend busn. obj.(EJBs) 
w/ use of WebLogic app. 
server in clustered env. on 
Windows 2000 server & SQL 
2000/Oracle/SAP as backend 
d/b. Req: MS in Comp. Sci 
Bid. Sci. or related. 40 
hrs/wk. Job/Interview Site 
Newark, DE. Send resume to 
AlphaNet Consulting, 705 S 
Silver Smith Ln., Newark, DE 
19702 


Multiple openings for exp'ed 
Prog/Sys Analysts, DBAs and 
S/W Engineers to perform 
design and development of S/W 
systems using various H/W, OS. 
tools, software packages and 
languages; developing client 
server, mainframe, midrange 
ERP and web applications 
Oracle database admin/systems 
admin. All positions require a 
BS/MS or foreign equiv in 
CS/Engg or related field 
Competitive salary. Some trav- 
el/relocation required. Send 
Resumes to: HR, Opal Soft, Inc 
3150 Almaden Expwy Ste 205. 
San Jose, CA 95118 


Asst S/W Eng 


Will assist in designing 
developing, integrating, and 
testing desktop & notebook 
computer test software/hard- 
ware architecture. Req. BS 
in Comp Sci. or related field 
40 hr/wk. Job site: Irvine. 
CA. Send resume to 
eMachines, Inc 14350 
Myford Rd., Irvine, CA 
92606. Pls ref to job code 
asweng-cw. 


e-lite companies 


e-merging companies 


e-ssential companies 


e-normous opportunities 


sp) Careers.com 


where the best get better 


1-800-762-2977 
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IT CAREERS 


Software Developer wanted to 
design, Develop and implement 
Software programs to assist nation- 
al/international companies 
Improve sales of product in Retail 
Outlets. Design, implement and 
Manage system to support local- 
ized multi-lingual database and 
websites for international clients 
Perform web development inciud- 
ing web page design, development, 
testing, implementation and main- 
tenance. Perform coding using 
ASP, ASP.N VB, VB.NET, VB 
Script, Jav pt, COM, DCOM 
Active X L, OHTML, CSS 
Server 

Windows 

40 hrs/week 

Requires a 

Computer 

Science of e gineering 
Plea if esume to Panos 
Mastrogiannis, SPAR Infotech, 580 
White Plains Road, 6th Floor. 
Tarrytown, NY 10591. Employer 


Paid Ad 


Bahwan Cybertek Technologies. 
Inc. has several openings available 
for qualified Prog/Sys Analysts. 
Soft Enggs./Consult-ants, Proj 
Mgrs, DBAs and Sys Admins to 
design/de’ P applications using 
skill sets such as C, C++, VB. 
VC++, Java, EJB, Oracle, Informix 
Sybase, UML, Internet, telephony 
and wireless technologies, Win- 
dows/UNIX ad Require: BS/MS 

Comp Sci/Engg(any 
branch)/Sci./Math/Buss./related 
field. C jucation and 
experience will t cepted. Highly 
competitive salaries & benefit 
Travel involved. Resumes to: Ste 
312, 209 West Central Street 


Natick, MA 01760 


Prog/Analysts to analyze 
design, test enterprise level 
appls using Java, HTML, VB. 
ASP, JDBC, Serviets, etc. under 
Windows and UNIX OS; perform 
database monitoring and quality 
control, coding and testing of 
projects; generate batch reports 
from existing data and debug for 
better performance. Require BS 
or foreign equiv in CS/Engg (any 
branch) and 1 yr exp in IT. High 
salary. F/T. Travel required 
Resumes to Salem Associates 
Inc. 405, 6th Ave, Ste 102, Des 
Moines, !A 50309 


Aurora Consulting is looking for 
Programmer Analyst, Software 
Engineer to implement Oracle 
Financials f ants. Candidates 
must have BS/MS, exp. in Oracle 
and US work permit. We offer 
attractive wage. Send resumes 
to 9093 Countrywood Dr 
Plymouth, MI 48170. EOE 


Netsoft is an IT consulting firm 
with offices in different states. 
has positions for software/project 
engineers, system/programmer 
analysts. Req: BS with min 1-yr 
exp. Preferred skills in Oracle. 
Seebeyond, SQL, Java. Apply 
br@nstc.net or jobs@nstc.net 


Sr. Programming Analyst 
(multiple positions). Design 
customized techn appl pro- 
grams. Install & config pro- 
gram prod. Determine tech 
infrastructure & comm. Req 
Test appl. Analyze, design & 
develop app. Interfaces using 
IBM AS400, RPGLE, C/400 & 
Java/400. Req. BS in Comp 
Sci., Comp Eng. Or Elect 
Eng. And 5 yrs exp as Pro- 
grammer. 40 hr/wk. Job/inter- 
view site: Irvine, CA. Send 
resume to SVI Solutions, 
5607 Palmer Way, Carlsbad, 
CA 92008 


Corpus incorporated, here- 
inafter referred to as, “Corpus’ 
is a leading Information Tech- 
nology Services firm providing 
innovative B2B, enterprise inte- 
gration and m-commerce solu- 
tions and services to businesses 
worldwide. We have the foilow- 
ing position available: 


Business Intelligence Analysts. 
Utilize Business and Technical 
Expertise in Systems Appi- 
ication and Products in Data 
Processing Analyze User 
requirements, procedures and 
problem to automate process. 
improve computer SAP 
Systems. Plan, design and 
implement integrated family of 
sales, marketing, and customer 
service applications. in SAP 
FICO moduies. Utilize tools 
such as C++, C#, ASP NET 
SeeBeyond, MS SQL Server 
2000 and Oracle 9i to provide 
implementation using object ori- 
ented design and Provide post- 
implementation support. Need 
Bachelor's in Business 
Administration or Computer 
Science or Engineering. Need 2 
years of experience in related 
field 


Programmer Analysts: Plan 
design, develop, test and deploy 
n-tier object-oriented enterprise 
software applications Exp- 
erience in the following tech- 
nologies required OOAD. 
RDBMS, Client Server Tech- 
nology, Distributed Computing 
and Configuration and Change 
Control Management. Also 
knowledge of the following tools 
and methodologies is essential 
Unix, Oracle, Informix, SQL 
C++, Corba, MQ Series, XML 
UML, Testing tools and the 
Rational tools like Rational 
Rose, Rational Requisite Pro 
Clear Case and Clear Quest. 
Need Bachelor's degree in 
Engineering or Computer 
Science and 2 years of experi- 
ence 


Send resume to: HR. 1300 
West Wainut Hill Lane, Suite 
#250, Irving, TX 75038. E-mail 
jobs@corpusinc.com 


Data Base Administrator 
Analyze database management 
systems and network adminis- 
tration using Oracle database on 
Unix platforms such as Sun 
Solaris, IBM AIX, and SCO 
Develop backend access using 
PL/SQL server and SQL Server. 
Analyze and identify compo- 
nents and features of Recovery 
Manager (RMAN), configure 
database for archive processing 
and identify the contents of user 
process trace files. Requires 
Bachelor of Science degree in 
Comp. Sci., Eng. or related field 
and 2 years experience in soft- 
ware development inciuding 
hands on knowledge of Oracle 8 
X Administration. 40hrs/wk (8- 
5); $75,000.00/yr. Send two 
resumes/responses to: Case 
Number 200114999, Labor 
Exchange Office, 19 Staniford 
Street, 1st Floor, Boston, MA 
02114 


AFI, Inc. 

S/W Eng./Sys. Analysts /Techn 
- Interface Mor Multiple 
Positions. S/W Eng. & Sys 
Anal. will dev., code, test, impie- 
ment & maintain custom S/W 
pkg. in areas of web dviprnnt. w/ 
the use of Windows NT/2000 
Visual Basic, Asp, JavaScript. 
VB Script & SQL Server. Tech.- 
Inter. Mgr. will perf. sys, analy- 
sis, data mapping, info. archit. 
web page dvipmnt. & mainte- 
nance for AFI website & custom 
agent/ CSR appl. & HTML w/ the 
use of C++, ERD, SQL 
Scripting, ASP, SQL Server. 
Req: MS in Comp. Sci. Comp. 
Eng., S/W Sys., Mech. Eng. or 
Info. Sys. (can be sub. wi BS + 
5 yrs. exp) 40 = hrs/wk 
Job/interview Site: Encino, CA. 
Ref#: 1A1000. Resumes to 
careers@answerfinancial.com. 


Computer System 
Administrator 
(Yorktown Heights, N.Y.) 


Evaluates business requirements 
for new or modified program to 
determine cost and time 
required, compatibility with 
current system, and required 
computer capabilities. Consults 
with managerial and systems 
Operation personnel and systems 
architects to clarify program 
intent and objectives, identify 
problems and suggest changes 
to Unix Production System 
Within ume and cost restraint 
and considering hardware 
capabilities, analyzes, researches, 
designs, and develop computer 
software systems relating to 
Unix utilizing principles and 
techniques of computer science. 
engineering, and mathematical 
analysis Prepares object 
models and data flow diagrams 
to develop program considering 
hardware capaiilities and 
intended use of output data 
Plans, schedules, develops, tests. 
and = documents computer 
programs using object models 
and data fiow diagrams applying 
knowledge of programming 
techniques and computer 
systems. Consults with systems 
operation personnel to install 
and maintain the software 
system. Tests programs, detects. 
locates and corrects errors. 
Monitors _performan of 
program after implement oi 
corrects errors and optumuzes for 
performance. Requ Bachelor 
2 Computer Science, 
Information 
Systems r 
ther with three 
years of experience in the job 
duties or a Master degree and 
one year experience. Must have 
two years experience with DNS 
BIND and APACHE. Must be 
able to communicate in English 
40 hours a week: Monday to 
Friday, 8:30 am to 4:30 pm 
$76,357.00 per year Send 
resume in duplicate to 
AIM-438, P.O. Box 703, NY, 
NY 10014-0703. EOE 


Computer Software Engineer. 
Atlanta, GA - implement designs 
adhering to well-structured soft- 
ware engineering standards 
design specification and the 
development schedule. Primary 
modules of responsibility may 
include Viewer, Movie, Profile 
Tools, Virtual GIS and New 
Visualization Capabilities. Test 
software and on-line help to 
assure minimum level of quality 
is met. Maintain software during 
its life cycle. Bachelor of 
Science and 3-5 years’ of GIS; 
Remote Sensing processing 
techniques and methodologies 
experience required. Leica GIS 
and Mapping Division, LLC 
2801 Buford Highway, NE, Suite 
400 Atlanta GA 30329 
jody. stepakoff@gis.leica- 
geosystems.com 


IT Analyst lil. Setup & monitor 
MQ queue structures; middie- 
ware Java objects dvipmt; cod- 
ing & testing of COBOL/CICS 
multi-envrmt prgms; dsgn n-tier 
architecture; ETL data transfer. 
BS in Comp Sci or related field 
+5 yrs exp in job offd or as 
S/ware Engr or similar duties 
under different job title. Exp 
must inci middleware dvipmt 
involving MQ Series, Cobol 
Java; IBM Workflow, Mercator. 
Maestro, XML, XSL, UML & 
Business Objects; MVS & Win 
NT envrmt utilizing DB2 & 
Oracle 11i; writing & monitoring 
MQ queues; willingness to travel 
(up to 26%). 40 hrs/wk, $58K/yr. 
Must have proof of iegal auth to 
work in US. Send your resume 
to IA Workforce Center, 215 Keo 
Way, Ste 100, Des Moines, IA 
50309-1727. Please refer to 
JO# 1A1101659. Employer paid 
ad 
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Computer 
Software Designer 


(Yorktown Heights, N.Y.) 


Analyzes software requirements 
to determine feasibility of 
Jesi within time and cost 
restraints, and considering 
hardware capabilities, analyzes. 


rches desi and 


ese 
develops computer software 
n Windows utilizing 
principles and techniques of 
computer science 
and mathematical 
Prepares object moc 
data flow diagrams to develof 
program considering hardware 
capabilities and intended use 
of output Plans, schedules. 
yps, tests, and documents 
computer grams using 
object models and data flow 
liagrams applying knowledge 
of programming techniques 
and computer systems 
Consults with systems 
operation personnel to install 
and main n the software 
system. Tests programs, detects. 
locates and corrects errors. 
Monitors performance of 
program after implementation, 
corrects errors and optimizes 
for performance. Requires a 
Bachelor de n Computer 
Science/Engineering, Electrical 
Engineering, Mathematics or 
Computer Applications and 
two ye experience 


raM 


two 
Analyst software engin 
Must have two years experier 
in C++, C, COM, ATL, and 
all Windows operating systems. 
Must be able to communicate 
zlish. 40 hours a week 
4:30pm, $85,000 
sar. Send resume in 
duplicate to: AIM-437, P.O. Box 
703. N.Y., N.Y. 10014-0703 


ff 

echnology Group 

Perform research, analysis. 
design, development. testing & 
mplementation of transceiver 
modem. Design & simulate high 
speed & low power platforms, fil- 
ters, diplexers, PLLs & other RF 
circuitry for modem. De: suit- 
able channel coding, modulation 
& equalization meth for 
bandwidth efficient, extremely 
reliable bi-directional communi 
cations. Research & investigate 
design requirements, vendor 
specs, market trends, & industry 
standards for parts to be used in 
circu Perform testing & 
analysis of hardware prototypes 
of product design. Develop engi- 
neering design anatysis & trade- 
offs for cost, stability, perfor 
mance, & quality to make rec- 
ommendations to management. 
Work & collaborate with other 
engineers to share ideas & 
resolve sftware & hrdware 
yes. Master's degree in 
Electricai/Electronics Eng’g or a 
closely related field, & 1 y 
experience in job offered or in 
Communications Systems 
Research Engineering. Req- 
uires demonstrated knowledge 
of communications systems the- 
modems & 

expertise in dvipment & applica- 
tion of broadband, high-speed 
communication networking 
such as modulation, equaliza- 
tion, & channel coding theory. 40 
hrs/wk; 9a-6p (M-F); $88,000/yr. 
Must have unrestricted autho- 
tization to work in U.S. Submit 
resume in duplicate to: Case 
#200114590, Labor Exchange 
Office, 19 Staniford St, 1st fi 

Boston, MA 02114. EOE 





ENGINEERS 


Netopia has the following opportunities available in our Orem, Utah location: 


Job De 


Dased $0 


American Information Technolo- 
gy Corp has several openings 
for Programmer Analyst/Sys- 
tems Analyst/Software Engineer. 
System Admn, Database Admin- 
strator with at least two years of 
experience in any of the follow- 


g skills 


Database Admn: Informix, Ora- 
cle, Sybase, MS SQL, DB2 
Systems Admn: UNIX (SUN 
HP-UX, AIX), WIN NT, MVS 
Programmer Analysts/Sys- 
tems Analysts/Software Eng- 
ineers: VB, PB, AS/400, RPG. 
400, Synon, JDEdwards, Pro- 
gress, Java, J2EE, HTML, WEB 
E-commerce, C++, VC++, Lot- 
usnotes, CORBA, EDi/Mercator, 
CGi, Perl, PL/SQL, Oracle 
Cobol, JCL, Cognos, Erwin 
ETL, Peopleoft, SAP, DW, BO 
Coldfusion, TIBCO, .Net, C# 
Oracle Financials, Datastage 
CRM, Actuate 


Some positions require a Bach- 
elors Degree, others Masters 
Degree. Equivalent degree and 
experience is also accepted 
Exc. Pay & Benefits. Please ind- 
icate the position you are apply- 
ing. Mail resume to: HR Dent 

3204, Long Prairie Road, Suite 
E, Flower Mound, Texas - 75022 


Lead Software Developer 
Waltham, MA 


Requires experience in 
design and development of 
applications using Java, UML 
Oracle, XML, Webspere, 
UNIX and NT. Experience 
working in Biotech or 
Pharmaceutical industry a 
plus. Attractive compensation 
package. Please send res- 
umes to: Human Resources, 
40 Bear Hill Road, Waltham. 
MA 02451; e-mail 

work@beyondgenomics.com 


Sr. Software Engineers - # 0201 


Administrators - # 0202 


develops, licenses, and supports hosting 


f independent 


COMPUTERI/IT 
Senior Analyst, Vega HR. (Troy 
Ml). Requires a Bach.'s degree 
(or equiv. foreign educ.) in 1.T. 
M.LS., or computer systems 
analysis, and 2 yrs.’ exp. in the 
job offered or 2 yrs.’ exp. in 
development and configuration 
of SAP R/3 Human Resources 
(H.R.) module utilizing 
Accelerated SAP (ASAP) 
methodology. All stated exp 
must involve each of the follow- 
ing: definition of functional spec- 
ifications for the development of 
custom reports, interfaces, con- 
s, & enhancements; defi- 
nition of SAP R/3 H.R. module 
security requirements; & use of 
automated test tools. Exp. must 
include one full lifecycle of SAP 
R/3 H.R. module development. 
In lieu of Bach.'s degree (or 
equiv. foreign educ.), will accept 
2 additional yrs. of systems 
analysis exp. Engage in devel- 
opment & configuration of SAP 
R/3 H.R. module over a full life- 
cycle utilizing ASAP methodolo- 
gy. 40 hrs/wk. 8:00-5:00 
Apply with resume to LaWanda 
White, Delphi Corporation, 5825 
Delphi Dr., Troy, Mi 48098. 
EOE. Reference #0116 when 
applying 


emery 33:4 
OPPORTUNITIES 


CSC has the following positions 
available in Massachusetts 


* ERP Program Director 
* ERP Product Specialist 


We offer excellent compensation 
and a comprehensive benefits 
package. Positions may require BS. 
MS, relevant experience, or combi 
nation of education and experience 
the level of position 
National travel of up to 100% may 
be required. Please forward resume 
to: S. Neer, 5885 Landerbrook Dr. 
#300, Cleveland, OH 44124. Must 
indicate job title in cover letter. 


based or 


HTTP.//CAREERS CSC COM 


cme 
‘ao Seo 


IT CAREERS 


Multiple openings for permanent 
Programmer Analyst/Quality As 
surance/Test Engineers/Data- 
base Administrators/System or 
Network Engineers/Business 
Analyst/Software Engineer posi- 
tions from entry to senior level 
throughout the US. Will design 
develop, program and test busi- 
ness applications, enterprise 
systems, networks and comput- 
er systems involving TPF, sales 
force automation, data ware- 
housing, business metrics, E- 
commerce, Internet/Web appli- 
cations, and others using object 
oriented design and develop- 
ment, relational database mod- 
eling, distributed systems, and 
current Web technologies. Par- 
ticular tools include one or more 
of: JAVA, C/C++, Visual Basic 
ASP, ActiveX, UNIX, PL/SQL 
SAP, Windows NT, Lotus Notes. 
Perl, COBOL, IMS, CICS, DB2 
TPF, Assembler, CORBA, HP/ 
UX, COM/DCOM, OLE, CGi 
Internet technologies such as 
HTML, JDK 1.2, Java Web 
Server 2.0, EJB in Sun Solaris 
Windows NT 95/98, and others 
B.S. in Computer Science, Eng- 
ineering, Math. or related area. 
Will accept combination of edu 
cation, training and experience 
in lieu of degree. Prior experi- 
ence and M.S. required for 
some positions. Competitive 
salary/401(k)/benefits offered 
Most active locations include: 
Atianta, GA, Bloomington, MN 
Chicago, Peoria, Normal, IL 
San Francisco, San Jose, CA 
Baltimore/Columbia, Maryland 
Durham, NC, Ft. Lauderdale. 
Jacksonville, Miami, Tallahas 
see, FL, Minneapolis, MN, Fair- 
fax, Herndon and Richmond. 
VA, St. Louis, MO, Raleigh 
Winston-Salem, NC, Cedar 
Rapids, Des Moines, IA, Hazlet. 
NJ, Kansas City, KS, Milwaukee 
WI. Send resume to: intelliMark: 
Technisource, 12140 Woodcrest 
Executive Drive, Suite 300, St 
Louis, MO 63141, Attn: Betsy 
Smith 


SOFTWARE ENGINEER to de- 
sign, develop and support applica- 
tion software in a client/server 
environment using object oriented 
analysis, C, C++, COBOL, SPIl 
Visual Basic, MS-SQL, Oracie 
Log-Analyzer, ASP, Visual Studio 
and Universal DB2 on Windows 
NT/XP, UNIX and IBM MVS 
OS390 platforms; Develop Graph- 
ical User Interfaces. Require 
Bachelor's degree in Computer 
Science/Engineering, or a closely 
related field, with five years of pro- 
gressively responsible experience 
in the job offered or as a Program- 
mer/Analyst or Programmer Ex- 
tensive travel on assignments to 
various client sites the U.S 
is required. Competitive salary 
offered. Send resume to: Satish 
Kumar Ashok, CSR Data Systems. 
Inc 21 Crestwood Street 
Piscataway, NJ 08854; Attn: Job 
SR 


Open Text, Inc. is seeking a 
Software Developer - Japan- 
ese Applications in its Chi- 
cago area and Detroit area 
offices. Responsibilities in- 
clude testing, debugging, fix- 
ing software defects; analysis 
documenting, programming, 
testing of software for Japan- 
ese applications. BS/MIS in 
Computer Science is a must. 
Excellent written verbal and 
conceptual skills required in 
both Japanese and English 
languages. Please fax res- 
ume to 847-267-9385 


Satyam Computer Services Ltd., 
a leading software consulting 
company, seeks computer pro- 
fessionals for various positions 
including: Programmer Analyst. 
Database Administrator, Syst- 
ems Analyst, Business Systems 
Analyst, Quality Engineer and 
Software Engineer. Opportun- 
ities exist for qualified applicants 
with 1-7 years of related experi- 
ence with one or more of the fol- 
lowing 


+ User Interface Design 

+ Performance monitoring and 
Tuning 

* Operating System Level 
Tuning 

* Client/server object Oriented 
Development 

* Case Tools/Modeling 

* IBM Mainframe Tools 

* Communications & 
Networking 

* Web Development 

+ E-Business 

* RDBMS 

+ Database Administration 

* Business process or Technical 
Re-Engineering 

* Software Implementation 

* Supply chain Management 

* Enterprise Resource Planning 

+ Enterprise Systems 
Management 

+ Object/Distributed 
Technologies 

+ Middleware 

* Groupware 

* Data Warehousing 

* QA Environments 

* Communications & 
Networking 

+ Customer Information 
Systems 

* Billing Systems 


All positions require a Bachelor's 
degree in a related field. Some 
positions require a Master's 
degree and ali positions requires 
frequent relocation. Opportun- 
ities available through out US 
Please email your resume with 
Job Code #GENITC 1202 
including salary requirements to: 
resumeus@satyam.com 


SOFTWARE ENGINEER 


Software engineer to design 
develop and test computer pro- 
grams for business applications: 
analyze software requirements to 
determine feasibility of design 
direct software system testing pro- 
cedures using expertise in Natural 
Adabas, JCL and Expeditor. Re- 
quirements: Bachelor's Degree or 
equivalent in Computer Science or 
related field and two years experi- 
ence as a software engineer or| 
computer programmer, knowledge 
of Natural, Adabas, JCL and 
Expeditor. Salary: $66,000/year. 
Working Conditions: 8:00 A.M. to 
5:00 P.M., 40 hours/week, invoives 
extensive travel and frequent relo- 
cation. Apply: Manager, Armstrong 
County Team PA CareerLink, 1270 
North Water Street, PO Box 759. 
Kittanning, PA 16201, Job No. 
WEB295693. 


Project Managers and SAP 
Consultants needed. Seeking 
candidates poss MS/BS or 
equiv. and/or rel work exp. 
Part of the req. rel. exp. must 
include 3 yrs using Java and 
Oracle or ABAP4, Oracle and 
SAP. Duties include: Perform 
software analysis, design and 
development. Knowledge of| 
gas pipeline industry stan- 
dards a plus for Project 
Manager position. Mail res, ref 
and sal req to: K2Systems, 
Inc., 555 Republic Drive, 
#305, Plano, TX 75074 
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FOVEAL SYSTEMS LLC 32 
GARTNER INC. 4,5,30,39,45 
GEAC COMPUTER CORP. 
GENCORP INC. 

GIGA INFORMATION GROUP 
NC. 

GRT CORP. 

HARTFORD FINANCIAL 
HEWLETT-PACKARD CO. 
HORIZON BLUE CROSS 
BLUE SHIELD. SI 
HUSH COMMUNICATIONS INC. 36 
(2 TECHNOLOGIES INC 5 
(BM 4.6,10.12,20,21,44 
‘pc 830,39 
INFORMATION TECHNOLOGY 
ASSOCIATION OF AMERICA 

INSIGHT 64 

INTEL CORP. 

INTERNATIONAL TRUCK 

AND ENGINE CORP. 

(SO NEW ENGLAND INC. 

JEFFREY A. MILLER & 

ASSOCIATES 

JONES APPAREL GROUP INC 

KANA SOFTWARE INC. 

LANDESK SOFTWARE INC. 

LOTUS SOFTWARE 

GROUP 

LOWE'S COs. 


1.4,10,20,21 





MIT MEDIA LABORATORY 6 
MOTOROLA INC. 28 
MYSQL AB 6 
NATIONAL GOVERNORS, 

ASSOCIATION 

NATIONAL INSTITUTE OF 

STANDARDS AND 

TECHNOLOGY 

NEOTERIS INC. 

NETILLA NETWORKS INC. 

NETSILICA INC. 

NETWORK ASSOCIATES INC. 

NEUCOM CORP. 

NEW YORK ISO 

NEW YORK TIMES CO. 

NICOR ENERGY LLC. 

NORTHWESTERN MEMORIAL 
PHYSICIANS GROUP. 

NUCLEUS RESEARCH INC. 

OFFICE OF THE COMPTROLLER OF 

THE CURRENCY . 10 
ON SEMICONDUCTOR CORP. 5 
ORACLE CORP. 1,4,6,18,23,24,28 
ORGANIZATION FOR THE 
ADVANCEMENT OF STRUCTURED 
INFORMATION STANDARDS. ..........37 
PEGASYSTEMS INC...... bane RO 
PEOPLESOFT INC. 18,23,24,44 
PGS GEOPHYSICAL. vende Ree 
PITTSBURGH SUPERCOMPUTING 
CENTER aap ab iorpatadweiiehs oF 
PJM INTERCONNECTIONLLC........... 1 





PUBLIC BROADCASTING 

SERVICE 

PUBLIC INTEREST 

BREAKTHROUGHS INC. 

RATIONAL SOFTWARE CORP. 

RED HAT INC. 

RELATIVITY TECHNOLOGIES INC. 

ROYAL CARIBBEAN 

CRUISES LTD. 

RSA SECURITY INC. 

SANMINA-SCi CORP. covet 
SAP AG 12,23,24,44 
SAP AMERICA INC. 2 
SBC COMMUNICATIONS INC. 4 
SCHNEIDER NATIONAL INC 

SECURITIES AND EXCHANGE 
COMMISSION. 

SEEBEYOND TECHNOLOGY 

CORP.... 

SEGUE SOFTWARE INC 

SIEBEL SYSTEMS INC. 

SILICON GRAPHICS INC. 

SINGLESTEP TECHNOLOGIES 

CORP. 

SITRAKA INC. 

SOLECTRON CORP. 

SONY CORP. ae 
SOURCEFIRE INC. ......-........ 36 
SOUTHWEST AIRLINES CO.......-... 68 
SPEAKEASY INC. 
SPINNAKER NETWORKS INC. . 

SPRINT CORP..... 


CONSORTIUM 

SYBASE INC. 

SYSTEM MANAGEMENT 
ARTS INC. 

TATUM CFO PARTNERS LLP. 
TERRA LYCOS SA 

THE BURTON GROUP 

THE CLIPPER GROUP INC 
THE GOLDMAN SACHS, 
GROUP INC. 

THE MEN'S WEARHOUSE INC. 
THE SANS INSTITUTE 

THE THOMSON CORP. 

THE WALT DISNEY CO. 
TOWERGROUP . 
TRUSECURE CORP. 

U.S. DEPARTMENT OF 
COMMERCE. 
UNICARE/COST CARE . 
UNISYS CORP. 

VERISIGN INC. 

VERITAS SOFTWARE CORP. 
VERITEST . 

WEBMETHODS INC. 

WELLS FARGO & CO. 
XIMIAN INC. 
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Trustworthy _ 


the BSD Unix operating sys- 
tem. “It is fairly secure, but it 
is also fairly devoid of any but 
the simplest of operating sys- 
tem functionality.” 

Craig Mundie, chief techni- 
cal officer of advanced strate- 
gies and policy at Microsoft, 


likened the technological chal- 


lenge Microsoft faces to “chas- 
ing a rocket ship.” 

“We continue to scale up 
the capability of the systems. 
As they get bigger and bigger, 
complexity mounts, and to 
some extent, those things all 
work against the idea that, 
well, can we really get this 
thing stabilized and im- 
proved?” Mundie said. He said 
he worries about maintaining 
the balance “between having 
to make the product and the 
business go forward and try- 
ing to lock it all down.” 

“Tf things weren’t moving, it 





would be easier,” Mundie said. 
“But they have to keep moving, 
or there would be no business.” 
Looking at it from a business 
management standpoint, he 
noted the challenges the com- 
pany faces in coming up with 
audit measurements to ensure 
that “the effort doesn’t dissi- 
pate,” especially 
since it could take 
10 to 20 years to 
achieve technologi- 
cal success. Yet an- 
other problem is the 
testing issues the 
company confronts 


| when it decides that it needs to 
| make a security fix that will af- 


fect a system as large as Win- 
dows, Mundie said. 

Several IT managers said 
they think Microsoft’s Trust- 
worthy Computing progress 
should be judged based on the 
number of vulnerabilities they 


| see in future releases. But 


many customers may continue 
to use older products that 
haven't been the focal point of 


Microsoft’s mo Card 


Grades ranged from B+ to D- 
when Computerworld asked IT 
managers, analysts and security 
professionals to rate Microsoft's 
progress on its Trustworthy Com- 
puting initiative during the past 
year. Excerpts follow: 


= Charles Emery, senior vice 

president and ClO, Horizon Blue 

Cross Blue Shield, Newark, N.J. 
8B 


“The automatic up- 
dates within the operating sys- 
tem are helpful and timely. Any- 
thing that receives as much fo- 
cus as Microsoft is giving this is- 
sue is bound to improve, but sad- 
ly, there are people 
a 


who are con- 


ait 
wouldn't give Microsoft high 
marks for now focusing on secu- 
rity issues that should have been 
embedded in their development 
process to begin with. They have 
_ alot of history to deal with in the 
short term. Of course, it's easy to 
criticize their current state, but 
they at least at a good grade for 


| Microsoft’s 


NEWS 


security push. 
“In the short term, I’m re- 
signed to an increasing cycle 


| of patches and updates to ex- 
| isting systems that my already 


THE STORY SO FAR 


Visit our Web site for a 
timeline of Microsoft's 
security moves in 2002 


@ QuickLink 35562 
www.computerworld.com 


| overwhelmed technicians 
| have to implement,” said Paul 


Lanham, senior vice president 


| and chief technology officer at 


Jones Apparel 
Group Inc. in Bris- 
tol, Pa. “I’m hoping 
that the next gen- 
eration of products 
from Microsoft ad- 
dresses these is- 
sues so that there 


| is a reasonable balance be- 

| tween the features that cus- 

| tomers insist upon and basic 

| security measures in the prod- 


ucts offered.” 
Marc Maiffret, co-founder 


| and chief hacking officer of 

| eEye Digital Security Inc. in 

| Aliso Viejo, Calif., said Micro- 
| soft should be devoting more 

| attention to ridding its current 


| products of vulnerabilities. 


“It 


| seems like they’re much more 


have aggressively addressed 
them. On the other side, there 
were a couple of occasions 
where they still reverted to mini- 
mizing the criticality of some of 
the holes.” 


= Russ Cooper, security con- 
——e 
don, Va. 

D- 

“In my opinion, Micro- 
vttauciigeenaeeeee 
ee 





worried about tomorrow, 


| which they should be. But I 
think today is even more im- 
| portant,” 


he said. 
As nice as it would be, re- 


| views of older products may 
| not be a realistic expectation, 


said Jason Fossen, a SANS In- 


stitute lecturer and president of 


Fossen Networking & Security, 


| a Windows security consultan- 
| cy in Dallas. “ 


If they’re fixing 
old stuff, there are fewer re- 


| sources being dedicated to the 
| current version,” 


he said. “It’s 
better to focus on Windows 
.Net Server and Windows XP.” 
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| tect at a large U.S.-based fi- 


nancial institution, is worried 


| that Microsoft will become 


| est security 


“easily distracted” from its lat- 
efforts, which 
“bring them only delayed grat- 
ification in terms of revenue.” 
“As soon as the next killer 
application comes along, Mi- 


| crosoft will go chasing after it 
| and forget all about making 


their infrastructure and prod- 


| uct offerings robust and reli- 


| curity exposure,” 


able, at least until the next se- 
Smith said. D 


Indeed, Microsoft is pinning | 


its hopes on its newly re- 


named Windows Server 2003 


| operating system to showcase 
| the fruits of its security labors. 


It shuttered Windows produc- 


| tion for 10 weeks last year to 


do security training and code 
reviews. One big change is 
that the Web server and other 


| potentially vulnerable features 
| are turned off by default. 


But Walt Smith, chief archi- 


Microsoft's future profits been so 
ai risk Dy ite security or insecuri- 
ty of their products. Microsoft's 
entire XML/SOAP/.Net project to 
make the Web services business 
model a reality will sink if IT deci- 
sion-makers believe it is inse- 
cure. Microsoft is betting the 
farm on Net Web services: 


Security Focus 


Mike Nash, vice president of Mi- 
crosoft's security business unit, 
said the company’s Trustworthy 
Computing “journey” has so far 

included the following efforts: 


SECURE BY DESIGN: Reduce 
the number of vulnerabilities in 
products from a design and im- 
plementation perspective. 


= 2002: Trained more than 
11,000 employees on what it 
means to design and write secure 
code, made developers account- 
abie for security and released 
— focused service packs 
for Windows XP and 2000 


SECURE BY DEFAULT: Reduce 
the attack surface area by ship- 
ping software with potentially vul- 
nerable components disabled 


= 2002: Turned off vulnerable 
features, such as the Web server, 
in Windows Server 2003, and 
changed share permissions in 
Windows XP via Service Pack 1. 


SECURE IN DEPLOYMENT: 
Supply tools. documentation and 
guidance to empower users to 
protect their environments. 

= 2002: Released the Software 
Update Services critical patch 
deployment tool, made automatic 
update feature available to Win- 
dows 2000 users, released 
Microsoft Baseline Security Ana- 
lyzer and introduced prescriptive 
documents for Windows 2000 
and Exchange Server. 


COMMUNICATION: Share 
information with customers and 
security professionals. 


= 2002: instituted a new severity 
rating system and added con- 
sumer security bulletins 
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FRANK HAYES #® FRANK 


SPEAKING 


Not So Obvious 


ID THOSE Wall Street investment houses really forget 

about PONI — the price of noninvestment — when 

they failed to create good e-mail archiving systems and 

got slapped with a $1.65 million fine per firm, as I wrote 

in my Dec. 9 column [QuickLink 34878]? Some of you 
don’t think so. “Your example was flat-out wrong: $1.65 million is 
nothing to them if it effectively covers their tracks,” one reader 
wrote to tell me. “In a way, these brokerages did perform a PONI 
and found it much more profitable to obscure and delete the audit 
trail, pay the fine and laugh all the way to the bank. To put it another 
way, these guys played the PONIs and won big.” 


Or as another reader who did the math point- 
ed out, Merrill Lynch was recently fined $100 
million in a case where key evidence came from 
Merrill’s own internal e-mails. He wrote: “It 
didn’t take these guys long to figure out how to 
save themselves $98.35 million dollars.” 

They’re right, it was a lousy example. And I 
was wrong to assume pure intentions were in- 
volved in that decision. Internal e-mails have 
been critical evidence in cases ranging from 
Iran-Contra in the 1980s to Microsoft’s recent 
antitrust trial. Did top management at those 
Wall Street firms do the math on the costs — 
and benefits — of not investing in good e-mail 
archiving systems? I don’t know. But it sure 
looks suspicious, doesn’t it? 

And it raises another question: How could 
the IT people at those firms not have wondered 
about such an obviously suspect decision? 

We all know the answer to that one. They 
probably did wonder. Maybe some even sus- 
pected the worst. But there’s a good chance 
they were simply kept in the dark. They just 
didn’t know. 

Welcome to the no-man’s land called IT in 
2003. As important as we’ve become 
to our companies over the past 
decade, we're still often kept out of 
the loop. 

To create the best systems and 
run them optimally, we need to 
know the hows and whys of the 
business we work for. We have to 
understand what the business does 
— and where it’s going. 

But that won’t always happen. IT 
may be critical, but that doesn’t 
mean they’ll tell us what’s going on. 

So when good projects — with 
the right technology and a solid 





business case — get nixed while loser projects 
get the green light, we can only make guesses 
about why the apparently illogical decision was 
made by management. 

Maybe it’s politics — a favor called in, an old 
score settled, a power play. Yeah, executives do 
that, even when it’s not in the best interests of 
the business. Hard to believe, huh? 

Maybe it’s technophobia or misunderstand- 
ing. Maybe someone with a deciding voice real- 
ly likes or loathes a particular technology or 
vendor. Maybe it’s history — a similar-sounding 
project that was a huge flop or a big success 
years ago. 

Maybe the CEO got a great idea from an arti- 
cle in an airline in-flight magazine and hasn’t 
been talked out of it by the CIO and CFO — yet. 

Maybe there’s a business deal we don’t know 
about — and won’t hear about until it’s a fait 
accompli. A merger. A layoff. A division closed 
or sold. A new line of business. Any of those 
things might make systems obsolete or change 
IT needs overnight. 

Maybe it really is simply a dumb decision. 
Or maybe it’s a case of criminal intent. 

We're just not likely to know 
until long after the decision is 
made — if at all. 

It’s still our job to calculate the 
ROI and PONI and to make the 
clearest and best business and 
technical case for our IT projects. 
Nothing changes that — even when 
a project is shot down for no ap- 
parent reason, and it appears obvi- 
ous that our executives haven’t 
thought through the costs of not 
building a system. 

Because — with good intent or 
ill — maybe they already have. D 
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